CVE-2007-5743 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2007-5743

Analyzed

More Info Official Page

Source-cve@mitre.org

Published At-07 Nov, 2019 | 22:15

Updated At-18 Aug, 2020 | 15:05

viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

viewvc>>viewvc>>1.0.3

cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>9.0

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>10.0

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-732	Primary	nvd@nist.gov

CWE ID: CWE-732

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416696	cve@mitre.org	Exploit Issue Tracking Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2007-5743	cve@mitre.org	Third Party Advisory

Hyperlink: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416696

Source: cve@mitre.org

Resource:

Exploit

Issue Tracking

Third Party Advisory

Hyperlink: https://security-tracker.debian.org/tracker/CVE-2007-5743

Source: cve@mitre.org

Resource:

Third Party Advisory