Total vulnerabilities in the database
Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.
| Software | From | Fixed in |
|---|---|---|
| viewcvs / viewcvs | 0.9.2 | 0.9.2.x |
| debian / debian_linux | 3.0 | 3.0.x |