project repository totally missing

[Yu He]

Hi,all:

 

We have use cvs for more than one year,the cvs server version is: V1.11.6 (for unix)

The Unix path of it is: /usr/local/cvsroot

We have project A,B,C under /usr/local/cvsroot which have the different group permission.

There is two incidents that the total project A's repository missed.

We have checked the system log, no one has access the cvs server through SSH services.

Additionally, the permission of /usr/local/cvsroot is root:root, so no one except ROOT id can delete folder A, but it is truly missing.

If it is not a contrived attack, is there some other reason to cause this?

Is it a bug of this version of cvs or a security leak?

 

 

Many thanks in advance!

Winnie He

EMAIL: address@hidden