CVE-2007-2448

2007-06-1423:30:00

Debian Security Bug Tracker

security-tracker.debian.org

2.1 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.6%

JSON

Subversion 1.4.3 and earlier does not properly implement the “partial access” privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.

OSVersionArchitecturePackageVersionFilename
Debian12allsubversion< 1.4.4dfsg1-1subversion_1.4.4dfsg1-1_all.deb
Debian11allsubversion< 1.4.4dfsg1-1subversion_1.4.4dfsg1-1_all.deb
Debian10allsubversion< 1.4.4dfsg1-1subversion_1.4.4dfsg1-1_all.deb
Debian999allsubversion< 1.4.4dfsg1-1subversion_1.4.4dfsg1-1_all.deb
Debian13allsubversion< 1.4.4dfsg1-1subversion_1.4.4dfsg1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	subversion	< 1.4.4dfsg1-1	subversion_1.4.4dfsg1-1_all.deb
Debian	11	all	subversion	< 1.4.4dfsg1-1	subversion_1.4.4dfsg1-1_all.deb
Debian	10	all	subversion	< 1.4.4dfsg1-1	subversion_1.4.4dfsg1-1_all.deb
Debian	999	all	subversion	< 1.4.4dfsg1-1	subversion_1.4.4dfsg1-1_all.deb
Debian	13	all	subversion	< 1.4.4dfsg1-1	subversion_1.4.4dfsg1-1_all.deb