NVD

Id
11584  
Name
CVE-2010-0004  
Description
ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this view.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-01-29  
Modified Date
2010-02-02  
Seq
2010-0004  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63310 11584 CVE-2010-0004 SUSE-SA:2010:008  View
63311 11584 CVE-2010-0004 http://viewvc.tigris.org/source/browse/*checkout*/viewvc/trunk/docs/release-notes/1.1.0.html?revision=2222  View
63312 11584 CVE-2010-0004 http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD  View
63313 11584 CVE-2010-0004 http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300  View
63314 11584 CVE-2010-0004 [oss-security] 20100111 CVE Request: viewvc  View
63315 11584 CVE-2010-0004 [oss-security] 20100113 Re: CVE Request: viewvc  View
63316 11584 CVE-2010-0004 [oss-security] 20100114 Re: CVE Request: viewvc  View
63317 11584 CVE-2010-0004 FEDORA-2009-13610  View
63318 11584 CVE-2010-0004 FEDORA-2009-13634  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45599 JVNDB-2009-006606 ViewVC における非公開 root 名を発見される脆弱性 ViewVC は、各 root に対して承認者無しで root 一覧ビューを作成するため、非公開 root 名を発見される脆弱性が存在します。 CVE-2010-0004 42584 CVE-2010-0004 11584 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006606.html 2009-12-02 2012-12-20 View