393 matches found
PT-2013-3429
Name of the Vulnerable Software and Affected Versions Subversion versions 1.6.x through 1.6.21 Subversion versions 1.7.0 through 1.7.8 Description The issue allows remote authenticated users to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved...
PT-2013-3431
Name of the Vulnerable Software and Affected Versions Subversion versions 1.6.x through 1.6.20 Subversion versions 1.7.0 through 1.7.8 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, via a PROPFIND request for an...
mod_dav: DoS (httpd child process crash) by parsing URI structure with missing path segments
The 1 modcache and 2 moddav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service process crash via a request that lacks a path...
(mod_dav_svn): DoS (excessive memory use) when configured to provide path-based access control
The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is enabled, allows remote attackers to cause a denial of service infinite loop and memory consumption in opportunistic circumstances by...
(mod_dav_svn): DoS (crash) via request to deliver baselined WebDAV resources
The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...
(mod_dav_svn): DoS (crash) via request to deliver baselined WebDAV resources
The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...
DEBIAN-CVE-2011-1921
The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to...
DEBIAN-CVE-2011-1783
The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is enabled, allows remote attackers to cause a denial of service infinite loop and memory consumption in opportunistic circumstances by...
(mod_dav_svn): DoS (NULL ptr deref) by a lock token sent from a not authenticated Subversion client
The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request that contains a lock token...
(mod_dav_svn): DoS (crash) by processing certain requests to display all available repositories to a web browser
The walk function in repos.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via vectors that trigger the walking of SVNParentPath...
(mod_dav_svn): DoS (crash) by processing certain requests to display all available repositories to a web browser
The walk function in repos.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via vectors that trigger the walking of SVNParentPath...
Design/Logic Flaw
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV WebDAV...
CVE-2010-3512
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV WebDAV...
CVE-2010-3512
CVE-2010-3512 affects Oracle iPlanet Web Server (Sun Java System Web Server) 7.0u8. The vulnerability is an unspecified issue in the WebDAV-related functionality that could allow remote authenticated users to affect confidentiality. The NVD entry describes an unspecified vulnerability in the WebD...
PT-2010-4874
Name of the Vulnerable Software and Affected Versions Oracle iPlanet Web Server Sun Java System Web Server version 7.0u8 Description The issue affects confidentiality and is related to DAV WebDAV, allowing remote authenticated users to exploit it. Recommendations For Oracle iPlanet Web Server Sun...
CVE-2010-3512: Undefined Security Weakness
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV WebDAV...
mod_dav: DoS (httpd child process crash) by parsing URI structure with missing path segments
The 1 modcache and 2 moddav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service process crash via a request that lacks a path...
apr-util billion laughs attack
The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...
