ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder.

This update of viewvc fixes multiple vulnerabilities.

  - CVE-2008-1290: list CVS or SVN commits on     'all-forbidden' files

  - CVE-2008-1291: directly access hidden CVSROOT folders

  - CVE-2008-1292: expose restricted content via the     revision view, the log history, or the diff view

This update of subversion fixes multiple vulnerabilities.

  - list CVS or SVN commits on 'all-forbidden' files.
    (CVE-2008-1290)

  - directly access hidden CVSROOT folders. (CVE-2008-1291)

  - expose restricted content via the revision view, the log     history, or the diff view. (CVE-2008-1292)

The remote host is running ViewVC, a web-based tool for browsing CVS and Subversion repositories.

The version of ViewVC installed on the remote host allows the reading of the contents of the 'CVSROOT' directory by navigating to it directly.  An attacker could leverage this issue to retrieve sensitive information.

Note that there are also reportedly two other information disclosure vulnerabilities associated with this version of ViewVC that could lead to exposure of restricted content, although Nessus has not checked for them.

The remote host is affected by the vulnerability described in GLSA-200803-29 (ViewVC: Multiple vulnerabilities)

    Multiple unspecified errors were reportedly fixed by the ViewVC     development team.
  Impact :

    A remote attacker could send a specially crafted URL to the server to     list CVS or SVN commits on 'all-forbidden' files, access hidden CVSROOT     folders, and view restricted content via the revision view, the log     history, or the diff view.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
40147	openSUSE Security Update : viewvc (viewvc-48)	Nessus	SuSE Local Security Checks	medium
33788	openSUSE 10 Security Update : viewvc (viewvc-5358)	Nessus	SuSE Local Security Checks	medium
33785	SuSE 10 Security Update : Subversion (ZYPP Patch Number 5362)	Nessus	SuSE Local Security Checks	medium
32381	ViewVC Direct Request CVSROOT Information Disclosure	Nessus	CGI abuses	medium
31635	GLSA-200803-29 : ViewVC: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2008-1291

high

Tenable Plugins

medium

medium

medium

medium

medium