CVS information leak
Published:		19.08.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3920
Type:		remote
Level:		5/10
Description:		By using undocumented -X key for 'cvs history' command it's possible to check existance of system files.

Affected:		CVS : cvs 1.11
		CVS : CVS 1.12

Original document

IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 08.16.04: CVS Undocumented Flag Information Disclosure Vulnerability (19.08.2004)

Discuss:

Read or add your comments to this news (0 comments)