CVE-2004-0915: Debian Linux

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.

Affected products

  • Debian Debian Linux: version 3.0 only
  • Viewcvs Viewcvs: version 0.9.2 only

Published 2005-01-10. Last modified 2026-06-16.