Summary
ViewVC is prone to these security vulnerabilities:
- A security vulnerability that involves root listing of per-root authorization configuration.
- A security vulnerability in 'query.py' involving the 'forbidden' authorizer (or none).
Versions prior to ViewVC 1.1.3 are vulnerable.
Solution
Vendor updates are available. Please see the references for details.
References
Severity
Classification
-
CVE CVE-2010-0004, CVE-2010-0005 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Alcatel-Lucent OmniPCX Enterprise Remote Command Execution Vulnerability
- AlienVault Open Source SIEM (OSSIM) 'timestamp' Parameter Directory Traversal Vulnerability
- admin.cgi overflow
- ActualAnalyzer Lite 'ant' Cookie Parameter Remote Command Execution Vulnerability
- AjaXplorer zoho plugin Directory Traversal Vulnerability