Lucene search
HistoryDec 23, 2004 - 5:00 a.m.
CVE-2004-0749
mod_authz_svn
subversion 1.0.7
vulnerability
remote access
sensitive information
nvd
cve-2004-0749
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.029 Low
EPSS
Percentile
90.9%
The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
Affected configurations
Node
subversionsubversionMatch1.0
ORsubversionsubversionMatch1.0.1
ORsubversionsubversionMatch1.0.2
ORsubversionsubversionMatch1.0.3
ORsubversionsubversionMatch1.0.4
ORsubversionsubversionMatch1.0.5
ORsubversionsubversionMatch1.0.6
ORsubversionsubversionMatch1.0.7
ORsubversionsubversionMatch1.1.0_rc1
ORsubversionsubversionMatch1.1.0_rc2
ORsubversionsubversionMatch1.1.0_rc3
Node
gentoolinuxMatch0.5
ORgentoolinuxMatch0.7
ORgentoolinuxMatch1.1a
ORgentoolinuxMatch1.2
ORgentoolinuxMatch1.4
ORgentoolinuxMatch1.4rc1
ORgentoolinuxMatch1.4rc2
ORgentoolinuxMatch1.4rc3
Related
freebsd
freebsd
subversion -- WebDAV fails to protect metadata
2004-09-15 00:00:00
nessus
nessus
gentoo
gentoo
Subversion: Metadata information leak
2004-09-29 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200409-35 (Subversion)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200409-35 (Subversion)
2008-09-24 00:00:00
Subversion Module unreadeable path information disclosure
2005-11-03 00:00:00
debiancve
debiancve
CVE-2004-0749
2004-12-23 05:00:00
nvd
nvd
CVE-2004-0749
2004-12-23 05:00:00
ubuntucve
ubuntucve
CVE-2004-0749
2004-12-23 00:00:00
cvelist
cvelist
CVE-2004-0749
2004-11-19 05:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.029 Low
EPSS
Percentile
90.9%
Related for CVE-2004-0749