Lucene search

[email protected]NVD:CVE-2015-0251

HistoryApr 08, 2015 - 6:59 p.m.

CVE-2015-0251

2015-04-0818:59:02

CWE-345

[email protected]

web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

4.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

JSON

The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.

Affected configurations

NVD

Node

apachesubversionMatch1.5.0

apachesubversionMatch1.5.1

apachesubversionMatch1.5.2

apachesubversionMatch1.5.3

apachesubversionMatch1.5.4

apachesubversionMatch1.5.5

apachesubversionMatch1.5.6

apachesubversionMatch1.5.7

apachesubversionMatch1.5.8

apachesubversionMatch1.6.0

apachesubversionMatch1.6.1

apachesubversionMatch1.6.2

apachesubversionMatch1.6.3

apachesubversionMatch1.6.4

apachesubversionMatch1.6.5

apachesubversionMatch1.6.6

apachesubversionMatch1.6.7

apachesubversionMatch1.6.8

apachesubversionMatch1.6.9

apachesubversionMatch1.6.10

apachesubversionMatch1.6.11

apachesubversionMatch1.6.12

apachesubversionMatch1.6.13

apachesubversionMatch1.6.14

apachesubversionMatch1.6.15

apachesubversionMatch1.6.16

apachesubversionMatch1.6.17

apachesubversionMatch1.6.18

apachesubversionMatch1.6.19

apachesubversionMatch1.6.20

apachesubversionMatch1.6.21

apachesubversionMatch1.6.23

apachesubversionMatch1.7.0

apachesubversionMatch1.7.1

apachesubversionMatch1.7.2

apachesubversionMatch1.7.3

apachesubversionMatch1.7.4

apachesubversionMatch1.7.5

apachesubversionMatch1.7.6

apachesubversionMatch1.7.7

apachesubversionMatch1.7.8

apachesubversionMatch1.7.9

apachesubversionMatch1.7.10

apachesubversionMatch1.7.11

apachesubversionMatch1.7.12

apachesubversionMatch1.7.13

apachesubversionMatch1.7.14

apachesubversionMatch1.7.15

apachesubversionMatch1.7.16

apachesubversionMatch1.7.17

apachesubversionMatch1.7.18

apachesubversionMatch1.7.19

apachesubversionMatch1.8.0

apachesubversionMatch1.8.1

apachesubversionMatch1.8.2

apachesubversionMatch1.8.3

apachesubversionMatch1.8.4

apachesubversionMatch1.8.5

apachesubversionMatch1.8.6

apachesubversionMatch1.8.7

apachesubversionMatch1.8.8

apachesubversionMatch1.8.9

apachesubversionMatch1.8.10

apachesubversionMatch1.8.11

Node

opensuseopensuseMatch13.1

opensuseopensuseMatch13.2

Node

redhatenterprise_linux_desktopMatch6.0

redhatenterprise_linux_hpc_nodeMatch6.0

redhatenterprise_linux_serverMatch6.0

redhatenterprise_linux_server_eusMatch6.7.z

redhatenterprise_linux_workstationMatch6.0

Node

oraclesolarisMatch11.3

Node

applexcodeMatch7.0

References

lists.apple.com/archives/security-announce/2015/Sep/msg00002.html

lists.opensuse.org/opensuse-updates/2015-04/msg00008.html

rhn.redhat.com/errata/RHSA-2015-1633.html

rhn.redhat.com/errata/RHSA-2015-1742.html

seclists.org/fulldisclosure/2015/Jun/32

subversion.apache.org/security/CVE-2015-0251-advisory.txt

www.debian.org/security/2015/dsa-3231

www.mandriva.com/security/advisories?name=MDVSA-2015:192

www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

www.securityfocus.com/bid/74259

www.securitytracker.com/id/1033214

www.ubuntu.com/usn/USN-2721-1

security.gentoo.org/glsa/201610-05

support.apple.com/HT205217

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

4.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

JSON

Related for NVD:CVE-2015-0251

debiancve1 cvelist1 ubuntucve1 cve1 openvas14 prion1 osv2 debian3 nessus20 securityvulns5 oraclelinux2 mageia1 veracode2 fedora1 redhat2 freebsd1 f52 centos2 amazon1 ubuntu1 suse1 gentoo1