Fedora 13 : subversion-1.6.13-1.fc13 (2010-16136)

This update includes the latest stable release of Subversion, version 1.6.13. Subversion servers up to 1.6.12 inclusive making use of the 'SVNPathAuthz shortcircuit' moddavsvn configuration setting have a bug which may allow users to write and/or read portions of the repository to which they are...

Mandriva Update for subversion MDVSA-2010:199 (subversion)

Check for the Version of subversion OpenVAS Vulnerability Test Mandriva Update for subversion MDVSA-2010:199 subversion Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Linux Security Advisory : subversion (MDVSA-2010:199)

A vulnerability was discovered and corrected in subversion : authz.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz shortcircuit is enabled, does not properly handle a named repository as a rule...

BSA-004 Security Update for subversion

Peter Samuelson uploaded new packages for subversion which fixed the following security problems: CVE-2010-3315 When "SVNPathAuthz shortcircuit" is enabled, authz authentication in the moddavsvn module for the Apache HTTP Server is flawed. Remote authenticated users can bypass intended access...

BSA-004 Security Update for subversion

Peter Samuelson uploaded new packages for subversion which fixed the following security problems: CVE-2010-3315 When "SVNPathAuthz shortcircuit" is enabled, authz authentication in the moddavsvn module for the Apache HTTP Server is flawed. Remote authenticated users can bypass intended access...

[SECURITY] [DSA 2118-1] New subversion packages fix authentication bypass

--------------------------------------------------------------------------- Debian Security Advisory DSA-2118-1 [email protected] http://www.debian.org/security/ Nico Golde October 8th, 2010 http://www.debian.org/security/faq -...

CVE-2010-3315

authz.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz shortcircuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass...

CVE-2010-3315

authz.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz shortcircuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass...

CVE-2010-3315

CVE-2010-3315 affects Apache Subversion’s mod_dav_svn: when SVNPathAuthz short_circuit is enabled, authz.c fails to correctly handle a named repository as a rule scope, allowing remote authenticated users to bypass access restrictions via svn commands. Vulnerable products/versions: Apache Subvers...

CVE-2010-3315

authz.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz shortcircuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass...

CVE-2010-3315

authz.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz shortcircuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass...

CVE-2009-3315

The affected software is NeLogic Nephp Publisher Enterprise (versions 3.5.9 and 4.5). The vulnerability is a SQL injection in admin/index.php via the Username field, caused by improper handling of input in the web application. This allows remote attackers to execute arbitrary SQL commands, with t...

CVE-2009-3315

creationtimestamp| type| source ---|---|--- 2009-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9712...

CVE-2008-3315

CVE-2008-3315 refers to multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10, exploitable via the query string on numerous files (e.g., announcements/messages.php, lostPassword.php, profile.php in auth/; calendar/myagenda.php; group/group.php; learningPath.; tracking/ ; user/*;...

CVE-2008-3315

creationtimestamp| type| source ---|---|--- 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32106 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32107 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32109 2008-07-22...

CVE-2007-3315

CVE-2007-3315 describes multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the serverPath parameter to bodyTemplate.php within the templates/Classic/, templates/Clas...

CVE-2006-3315

The CVE-2006-3315 entry describes a PHP remote file inclusion (RFI) vulnerability in the page.php of an unspecified RahnemaCo.com product (possibly eShop). The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the osCsid parameter. Based on the NVD data, the vuln...

CVE-2006-3315

PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to execute arbitrary PHP code via a URL in the osCsid parameter...

CVE-2005-3315

Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the 1 Direction parameter to computers/default.asp, and the 2 SearchText, 3 StatusFilter, and 4 computerFilter parameters to...

CVE-2005-3315

CVE-2005-3315 affects Novell ZENworks Patch Management 6.x up to 6.2.2.181. The issue is multiple SQL injection vulnerabilities triggered by requests to reports/default.asp and computers/default.asp, enabling execution of arbitrary SQL commands. The Checkpoint Advisory (CPA I) description states ...