CVE-2009-3619

Description

Unspecified vulnerability in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 has unknown impact and remote attack vectors related to "printing illegal parameter names and values."

How to fix CVE-2009-3619

To remediate CVE-2009-3619, upgrade the affected package to a fixed version below.

• Debian/viewvc—upgrade to 1.0.9-1 or later

Is CVE-2009-3619 being exploited?

Low — EPSS is 0.5%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.0.9-1

References (8)

• ADVISORYsecunia.com/advisories/36292
• ADVISORYsecunia.com/advisories/36311
• PATCHwww.vupen.com/english/advisories/2009/2257
• WEBlists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
• WEB