Mandrake Linux Security Update Advisory - cvs 10.0, 92, Corporate Server 2.1. A flaw in CVS versions prior to 1.1.17 in an undocumented switch to the CVS history command allows for determining directory structure and the existance of files on a target machine.
e1cdaf1293a24e2672547e99ab63263760f1dbe553b2c16f4764702091f0a9a9