ViewVC "cvsdb. py" Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
ViewVC 1.1.x
ViewVC 1.0.x
Unaffected system:
ViewVC 1.1.11
Description:
--------------------------------------------------------------------------------
Bugtraq id: 47928
Cve id: CVE-2009-5024

ViewVC is a Web-based CVS and SVN code repository browsing tool.

ViewVC "cvsdb. py" has a remote denial of service vulnerability. Remote attackers can exploit this vulnerability to consume a large amount of resources on the server and reject legitimate users.

<* Source: David Carson
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

ViewVC
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.viewvc.org/