Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2012-3356
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors..
CVSSv2.0 Score
- Severity
- Medium
- Base Score
- 5/10
- Exploit Score
- 10/10
- Access Vector
- Network
- Access Complexity
- Low
- Authentication Required
- None
- Impact Score
- 2.9/10
- Confidentiality Impact
- None
- Availability Impact
- None
- Integrity Impact
- Partial
Products Affected
| CPE | Affected | Vulnerable | Excluding | Edit |
|---|---|---|---|---|
| cpe:2.3:a:viewvc:viewvc:1.1.6:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.7:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.5:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:0.8:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:0.9.3:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.13:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.5:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:0.9.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.11:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.9:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:0.9.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.10:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.4:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:0.9.4:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.8:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.4:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.12:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.6:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.8:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.10:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.9:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.0.7:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.11:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:1.1.3:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:viewvc:viewvc:0.9:*:*:*:*:*:*:* |
Yes
|
- | - |
References
- http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2757
- http://www.openwall.com/lists/oss-security/2012/06/25/8
- http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2756
- http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2755
- http://www.securityfocus.com/bid/54197
- https://lwn.net/Articles/505096/
- http://osvdb.org/83225
- http://viewvc.tigris.org/issues/show_bug.cgi?id=353
- http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2760
- http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2759
- http://www.debian.org/security/2012/dsa-2563
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0175
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:134
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76614
- http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.15/CHANGES