CVE-2012-4506

概要

参考情報

• secunia.com/advisories/50896 · Vendor Advisory
• openwall.com/lists/oss-security/2012/10/10/1
• openwall.com/lists/oss-security/2012/10/10/2
• securityfocus.com/bid/55853
• exchange.xforce.ibmcloud.com/vulnerabilities/79130
• sitaramc/gitolite commit f636ce3
• groups.google.com/forum

gitolite のその他の脆弱性

• CVE-2010-2447緊急 9.8gitolite before 1.4.1 does not filter src/ or hooks/ from path names.
• CVE-2018-20683高 8.1commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a…
• CVE-2013-7203中 5.5gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when ru…
• CVE-2013-4451緊急 9.8gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when…
• CVE-2018-16976高 8.1Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in…