CVE

Id
31408  
CVE No.
CVE-2008-1291  
Status
Candidate  
Description
ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder.  
Phase
Assigned (20080312)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
336400 31408 CVE-2008-1291 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380  View
336401 31408 CVE-2008-1291 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=212288  View
336402 31408 CVE-2008-1291 CONFIRM:http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD  View
336403 31408 CVE-2008-1291 GENTOO:GLSA-200803-29  View
336404 31408 CVE-2008-1291 URL:http://security.gentoo.org/glsa/glsa-200803-29.xml  View
336405 31408 CVE-2008-1291 BID:28055  View
336406 31408 CVE-2008-1291 URL:http://www.securityfocus.com/bid/28055  View
336407 31408 CVE-2008-1291 SECUNIA:29176  View
336408 31408 CVE-2008-1291 URL:http://secunia.com/advisories/29176  View
336409 31408 CVE-2008-1291 SECUNIA:29460  View
336410 31408 CVE-2008-1291 URL:http://secunia.com/advisories/29460  View
336411 31408 CVE-2008-1291 VUPEN:ADV-2008-0734  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47525 JVNDB-2008-002835 Gregory Kokanosky phpMyNewsletter の archives.php における SQL インジェクションの脆弱性 Gregory Kokanosky phpMyNewsletter の archives.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-1295 31408 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002835.html  View