Unscored DSA-2563-1 4 CVEs

viewvc - several

Published Oct 23, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	viewvc	1.1.5-1.1+squeeze2

Vulnerabilities 4

Unscored —

CVE-2009-5024

ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting, and consequently cond…

May 23, 2011
Unscored —

CVE-2012-3356

The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authoriz…

Jul 22, 2012
Unscored —

CVE-2012-3357

The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a…

Jul 22, 2012
Unscored —

CVE-2012-4533

Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in…

Nov 19, 2012