CVE

Id
31409  
CVE No.
CVE-2008-1292  
Status
Candidate  
Description
ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters.  
Phase
Assigned (20080312)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
336412 31409 CVE-2008-1292 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380  View
336413 31409 CVE-2008-1292 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=212288  View
336414 31409 CVE-2008-1292 CONFIRM:http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD  View
336415 31409 CVE-2008-1292 GENTOO:GLSA-200803-29  View
336416 31409 CVE-2008-1292 URL:http://security.gentoo.org/glsa/glsa-200803-29.xml  View
336417 31409 CVE-2008-1292 BID:28055  View
336418 31409 CVE-2008-1292 URL:http://www.securityfocus.com/bid/28055  View
336419 31409 CVE-2008-1292 SECUNIA:29176  View
336420 31409 CVE-2008-1292 URL:http://secunia.com/advisories/29176  View
336421 31409 CVE-2008-1292 SECUNIA:29460  View
336422 31409 CVE-2008-1292 URL:http://secunia.com/advisories/29460  View
336423 31409 CVE-2008-1292 VUPEN:ADV-2008-0734  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47526 JVNDB-2008-002836 EncapsGallery におけるクロスサイトスクリプティングの脆弱性 EncapsGallery には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1296 31409 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002836.html  View