CVE ID:	CVE-2012-4506
Description:	Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a repository name.
Test IDs:	1.3.6.1.4.1.25623.1.0.72504
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4506 BugTraq ID: 55853 http://www.securityfocus.com/bid/55853 http://www.openwall.com/lists/oss-security/2012/10/10/1 http://www.openwall.com/lists/oss-security/2012/10/10/2 http://secunia.com/advisories/50896 XForce ISS Database: gitolite-security-bypass(79130) https://exchange.xforce.ibmcloud.com/vulnerabilities/79130