ISOMAN

CVE

CVE-2008-1292

ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters.

Severity
MEDIUM
CVSS
4.3
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
Gentoo2026.05.31 amd64 minimal installunknownsource
Gentoo2026.05.10 amd64 liveguiunknownsource
Gentoo2026.06.07 arm64 minimal installunknownsource
Gentoo2026.05.05 x86 minimal installunknownsource
Gentoo2026.06.11 powerpc minimal installunknownsource
Gentoo2026.06.11 powerpc minimal-dist installunknownsource
Gentoo2026.05.27 ppc64le minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal-dist installunknownsource
Gentoo2026.06.13 sparc64 minimal installunknownsource
Gentoo2026.06.13 sparc64 minimal-dist installunknownsource
Gentoo2026.06.14 arm64 minimal installunknownsource
Gentoo2026.06.16 x86 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal-dist installunknownsource
Gentoo2026.06.21 arm64 minimal installunknownsource
Gentoo2026.06.23 x86 minimal installunknownsource
Gentoo2026.06.25 powerpc minimal installunknownsource
Gentoo2026.06.25 powerpc minimal-dist installunknownsource
Gentoo2026.07.05 amd64 minimal installunknownsource
Gentoo2026.07.05 arm64 minimal installunknownsource
Gentoo2026.07.07 x86 minimal installunknownsource
Gentoo2026.07.09 powerpc minimal installunknownsource
Gentoo2026.07.09 powerpc minimal-dist installunknownsource
Gentoo2026.07.08 sparc64 minimal installunknownsource
Gentoo2026.07.08 sparc64 minimal-dist installunknownsource
Gentoo2026.07.12 amd64 minimal installunknownsource
Gentoo2026.07.12 amd64 liveguiunknownsource
Gentoo2026.07.12 arm64 minimal installunknownsource
Gentoo2026.07.14 x86 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal-dist installunknownsource
Gentoo2026.07.16 powerpc minimal installunknownsource
Gentoo2026.07.16 powerpc minimal-dist installunknownsource
Gentoo2026.07.19 arm64 minimal installunknownsource
Gentoo2026.07.21 x86 minimal installunknownsource
Gentoo2026.07.23 powerpc minimal installunknownsource
Gentoo2026.07.23 powerpc minimal-dist installunknownsource
Gentoo2026.07.22 sparc64 minimal installunknownsource
Gentoo2026.07.22 sparc64 minimal-dist installunknownsource
Gentoo2026.07.26 arm64 minimal installunknownsource
Gentoo2026.07.28 x86 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal-dist installunknownsource
Gentoo2026.07.30 powerpc minimal installunknownsource
Gentoo2026.07.30 powerpc minimal-dist installunknownsource
Gentoo2026.08.02 arm64 minimal installunknownsource
Gentoo2026.08.04 x86 minimal installunknownsource
Gentoo2026.08.06 powerpc minimal installunknownsource
Gentoo2026.08.06 powerpc minimal-dist installunknownsource
Gentoo2026.08.09 arm64 minimal installunknownsource
Gentoo2026.08.11 amd64 minimal installunknownsource
Gentoo2026.08.11 amd64 liveguiunknownsource
Gentoo2026.08.11 x86 minimal installunknownsource
Gentoo2026.08.13 powerpc minimal installunknownsource
Gentoo2026.08.13 powerpc minimal-dist installunknownsource
Gentoo2026.08.05 sparc64 minimal installunknownsource
Gentoo2026.08.05 sparc64 minimal-dist installunknownsource
Gentoo2026.08.16 amd64 minimal installunknownsource
Gentoo2026.08.16 arm64 minimal installunknownsource
Gentoo2026.08.18 x86 minimal installunknownsource
Gentoo2026.08.20 powerpc minimal installunknownsource
Gentoo2026.08.20 powerpc minimal-dist installunknownsource
Gentoo2026.08.19 sparc64 minimal installunknownsource
Gentoo2026.08.19 sparc64 minimal-dist installunknownsource
Gentoo2026.08.23 amd64 minimal installunknownsource
Gentoo2026.08.23 amd64 liveguiunknownsource
Gentoo2026.08.23 arm64 minimal installunknownsource
Gentoo2026.08.25 x86 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal-dist installunknownsource
Gentoo2026.08.27 powerpc minimal installunknownsource
Gentoo2026.08.27 powerpc minimal-dist installunknownsource
Gentoo2026.08.30 amd64 minimal installunknownsource
Gentoo2026.08.30 amd64 liveguiunknownsource
Gentoo2026.08.30 arm64 minimal installunknownsource
Gentoo2026.08.30 x86 minimal installunknownsource
Gentoo2026.09.01 x86 minimal installunknownsource
Gentoo2026.09.03 powerpc minimal installunknownsource
Gentoo2026.09.03 powerpc minimal-dist installunknownsource
Gentoo2026.09.06 amd64 minimal installunknownsource
Gentoo2026.09.06 arm64 minimal installunknownsource
Gentoo2026.09.06 amd64 liveguiunknownsource
Gentoo2026.09.08 x86 minimal installunknownsource

References

  1. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380
  2. http://bugs.gentoo.org/show_bug.cgi?id=212288
  3. http://secunia.com/advisories/29176
  4. http://secunia.com/advisories/29460
  5. http://security.gentoo.org/glsa/glsa-200803-29.xml
  6. http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD
  7. http://www.securityfocus.com/bid/28055
  8. http://www.vupen.com/english/advisories/2008/0734/references
  9. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380
  10. http://bugs.gentoo.org/show_bug.cgi?id=212288
  11. http://secunia.com/advisories/29176
  12. http://secunia.com/advisories/29460
  13. http://security.gentoo.org/glsa/glsa-200803-29.xml
  14. http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD
  15. http://www.securityfocus.com/bid/28055
  16. http://www.vupen.com/english/advisories/2008/0734/references