CVE-2010-0004

N/A Unknown

Published: January 29, 2010 Modified: April 29, 2026

Description

ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this view.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html

Source: secalert@redhat.com

http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/trunk/docs/release-notes/1.1.0.html?revision=2222

Source: secalert@redhat.com

http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD

Source: secalert@redhat.com

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/01/11/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/01/13/5

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/01/14/4

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01421.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01464.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html