CVS information leak

2004-08-1900:00:00

FULL-DISCLOSURE

vulners.com

By using undocumented -X key for 'cvs history' command it's possible to check existance of system files.

CPENameOperatorVersion
cvseq1.12
cvseq1.11

CPE	Name	Operator	Version
	cvs	eq	1.12
	cvs	eq	1.11

References

vulners.com/securityvulns/securityvulns:doc:6625