CVE-2008-1291

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.37%

Published

Mar 24, 2008

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder.

Weaknesses (CWE)

CWE-200

Affected Products (5)

gentoo · linux

redhat · fedora

viewvc · viewvcvulnerable

References (16)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380

http://bugs.gentoo.org/show_bug.cgi?id=212288

http://secunia.com/advisories/29176

Vendor Advisory

http://secunia.com/advisories/29460

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200803-29.xml

http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD

http://www.securityfocus.com/bid/28055

Patch

http://www.vupen.com/english/advisories/2008/0734/references

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380

http://bugs.gentoo.org/show_bug.cgi?id=212288

http://secunia.com/advisories/29176

Vendor Advisory

http://secunia.com/advisories/29460

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200803-29.xml

http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD

http://www.securityfocus.com/bid/28055

Patch

http://www.vupen.com/english/advisories/2008/0734/references

KEV Catalog EPSS Scores Vendors All CVEs