CVE-2010-2447

Mô tả

Tham khảo

• sitaramc/gitolite commit 1e06fea · Patch
• sitaramc/gitolite commit 5fd9328 · Patch
• sitaramc/gitolite release v1.4.1 · Third Party Advisory
• security-tracker.debian.org/tracker/CVE-2010-2447 · Third Party Advisory
• openwall.com/lists/oss-security/2010/06/24/5 · Mailing List

Lỗ hổng khác của gitolite

• CVE-2018-20683CAO 8.1commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a…
• CVE-2013-7203TRUNG BÌNH 5.5gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when ru…
• CVE-2013-4451NGHIÊM TRỌNG 9.8gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when…
• CVE-2018-16976CAO 8.1Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in…
• CVE-2012-4506TRUNG BÌNH 4.6Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows r…