Lucene search

K
mageiaGentoo FoundationMGASA-2014-0338
HistoryAug 21, 2014 - 1:36 p.m.

Updated subversion packages fix CVE-2014-3528

2014-08-2113:36:13
Gentoo Foundation
advisories.mageia.org
12

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

56.6%

Updated subversion packages fix security vulnerability: Bert Huijben discovered that Subversion did not properly handle cached credentials. A malicious server could possibly use this issue to obtain credentials cached for a different server (CVE-2014-3528). The subversion package has been patched to fix this issue.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchsubversion< 1.7.14-1.2subversion-1.7.14-1.2.mga3

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

56.6%