CVE-2008-1290

ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, which allows remote attackers to obtain sensitive information.

Date published : 2008-03-24

http://www.securityfocus.com/bid/28055

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380