CVE-2007-5743: debian debian_linux

Modified

Published 07-11-2019Last modified 07-08-2024

Vulnerability summary

CVE-2007-5743 is a high (CVSS 7.5) vulnerability in debian debian_linux. EPSS estimates a 1.10% chance of exploitation in the next 30 days, higher than 65.4% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

40/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (NVD)

EPSS score

1.10%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Timeline

07-11-2019
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.

CVSS metrics

2 scores · 1 source · 2 versions

v3.17.5v2.04.3

EPSS trend

Probability

1.10%

Chance of exploitation in the next 30 days

Percentile

65%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.10% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (bugs.debian.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-732Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Affected systems

Debian1 product

debian_linuxEOL8.0 | 9.0 | 10.0

Viewvc1 product

viewvc1.0.3

2 vendors · 2 products

References

2 links

security-tracker.debian.org/tracker/CVE-2007-5743X Refsource MISCThird Party Advisory
bugs.debian.org/cgi-bin/bugreport.cgi?bug=416696X Refsource MISCExploitIssue TrackingThird Party Advisory