Lucene search

K
kasperskyKaspersky LabKLA10071
HistoryAug 07, 2014 - 12:00 a.m.

KLA10071 DoS vulnerability in Apache Subversion

2014-08-0700:00:00
Kaspersky Lab
threats.kaspersky.com
27

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.139 Low

EPSS

Percentile

95.6%

Detect date:

08/07/2014

Severity:

Warning

Description:

An unspecified vulnerability was found in Apache Subversion. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to mod_dav_svn via a specially designed OPTIONS request.

Affected products:

Apache Subversion versions 1.3.0 to 1.7.14 and 1.8.0 to 1.8.5

Solution:

Update to latest version

Original advisories:

Apache bulletin

Impacts:

DoS

Related products:

Apache Subversion

CVE-IDS:

CVE-2014-00324.3Warning

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.139 Low

EPSS

Percentile

95.6%