Mandrake Linux Security Update Advisory – cvs 10.0, 92, Corporate Server 2.1. A flaw in CVS versions prior to 1.1.17 in an undocumented switch to the CVS history command allows for determining directory structure and the existance of files on a target machine.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34683/MDKSA-2004%3A108.txt
Source: https://packetstormsecurity.com/files/34683/MDKSA-2004-108.txt.html