NVD

Id
4153  
Name
CVE-2008-4325  
Description
lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content-Type header in the HTTP response, which allows remote attackers to cause content to be misinterpreted by the browser via a content-type parameter that is inconsistent with the requested object. NOTE: this issue might not be a vulnerability, since it requires attacker access to the repository that is being viewed.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-30  
Modified Date
2010-08-30  
Seq
2008-4325  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26510 4153 CVE-2008-4325 http://viewvc.tigris.org/issues/show_bug.cgi?id=354  View
26511 4153 CVE-2008-4325 http://viewvc.tigris.org/source/browse/viewvc/trunk/lib/viewvc.py?rev=2011&r1=1968&r2=1978  View
26512 4153 CVE-2008-4325 http://viewvc.tigris.org/source/browse/viewvc?rev=1978&view=rev  View
26513 4153 CVE-2008-4325 [oss-security] 20080919 viewvc security flaw?  View
26514 4153 CVE-2008-4325 [oss-security] 20080920 Re: viewvc security flaw?  View
26515 4153 CVE-2008-4325 FEDORA-2008-8252  View
26516 4153 CVE-2008-4325 FEDORA-2008-8270  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50941 JVNDB-2008-006251 ViewVC の lib/viewvc.py におけるブラウザにコンテンツを誤って解釈させる脆弱性 ViewVC の lib/viewvc.py は、HTTP レスポンス内の Content-Type ヘッダへの HTTP リクエストの content-type パラメータを使用するため、ブラウザにコンテンツを誤って解釈させる脆弱性が存在します。 CVE-2008-4325 34438 CVE-2008-4325 4153 5.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006251.html 2008-06-04 2012-12-20 View