CVE-2012-3356

Published: Jul 22, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

Affected (33)

Products: Viewvc: Viewvc

1 product

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Viewvc Viewvc	Up to 1.1.14
Viewvc Viewvc	Version 0.8
Viewvc Viewvc	Version 0.9.1
Viewvc Viewvc	Version 0.9.2
Viewvc Viewvc	Version 0.9.3
Viewvc Viewvc	Version 0.9.4
Viewvc Viewvc	Version 0.9
Viewvc Viewvc	Version 1.0.0
Viewvc Viewvc	Version 1.0.10
Viewvc Viewvc	Version 1.0.11
Viewvc Viewvc	Version 1.0.1
Viewvc Viewvc	Version 1.0.2
Viewvc Viewvc	Version 1.0.3
Viewvc Viewvc	Version 1.0.4
Viewvc Viewvc	Version 1.0.5
Viewvc Viewvc	Version 1.0.6
Viewvc Viewvc	Version 1.0.7
Viewvc Viewvc	Version 1.0.8
Viewvc Viewvc	Version 1.0.9
Viewvc Viewvc	Version 1.1.0
Viewvc Viewvc	Version 1.1.10
Viewvc Viewvc	Version 1.1.11
Viewvc Viewvc	Version 1.1.12
Viewvc Viewvc	Version 1.1.13
Viewvc Viewvc	Version 1.1.1
Viewvc Viewvc	Version 1.1.2
Viewvc Viewvc	Version 1.1.3
Viewvc Viewvc	Version 1.1.4
Viewvc Viewvc	Version 1.1.5
Viewvc Viewvc	Version 1.1.6
Viewvc Viewvc	Version 1.1.7
Viewvc Viewvc	Version 1.1.8
Viewvc Viewvc	Version 1.1.9

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (30)

http://osvdb.org/83225

Source: secalert@redhat.com

http://viewvc.tigris.org/issues/show_bug.cgi?id=353

Source: secalert@redhat.com

http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.15/CHANGES

Source: secalert@redhat.com

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2755

Source: secalert@redhat.com

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2756

Source: secalert@redhat.com

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2757

Source: secalert@redhat.com

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2759

Source: secalert@redhat.com

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2760

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2563

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:134

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/06/25/8

Source: secalert@redhat.com

http://www.securityfocus.com/bid/54197

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/76614

Source: secalert@redhat.com

https://lwn.net/Articles/505096/

Source: secalert@redhat.com

https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0175

Source: secalert@redhat.com

http://osvdb.org/83225

Source: af854a3a-2127-422b-91ae-364da2661108

http://viewvc.tigris.org/issues/show_bug.cgi?id=353

Source: af854a3a-2127-422b-91ae-364da2661108

http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.15/CHANGES

Source: af854a3a-2127-422b-91ae-364da2661108

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2755

Source: af854a3a-2127-422b-91ae-364da2661108

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2756

Source: af854a3a-2127-422b-91ae-364da2661108

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2757

Source: af854a3a-2127-422b-91ae-364da2661108

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2759

Source: af854a3a-2127-422b-91ae-364da2661108

http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2760

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2563

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:134

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/06/25/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/54197

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/76614

Source: af854a3a-2127-422b-91ae-364da2661108

https://lwn.net/Articles/505096/

Source: af854a3a-2127-422b-91ae-364da2661108

https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0175

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.