CVE-2014-3580

The moddavsvn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a REPORT request for a resource that does not exist...

CVE-2014-3580: Undefined Security Weakness

The moddavsvn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a REPORT request for a resource that does not exist...

PT-2014-5403

Name of the Vulnerable Software and Affected Versions Apache Subversion versions 1.x prior to 1.7.19 Apache Subversion versions 1.8.x prior to 1.8.11 Description The issue allows remote attackers to cause a denial of service, resulting in a server crash due to a NULL pointer dereference. This can...

Threat Outbreak Alert: Fake Tax Report Request Email Messages on January 20, 2014

Medium Alert ID: 32492 First Published: 2014 January 21 16:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain tax details for the recipient. The text in the email message attempts to convince the recipient to open the...

Medium: subversion

Issue Overview: The isthislegal function in moddontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service resource consumption via a relative URL in a REPORT request. The...

Design/Logic Flaw

The isthislegal function in moddontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service resource consumption via a relative URL in a REPORT request...

CVE-2013-4505

The isthislegal function in moddontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service resource consumption via a relative URL in a REPORT request...

CVE-2013-4505

The isthislegal function in moddontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service resource consumption via a relative URL in a REPORT request...

CVE-2013-4505: Undefined Security Weakness

The isthislegal function in moddontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service resource consumption via a relative URL in a REPORT request...

PT-2013-5046

Name of the Vulnerable Software and Affected Versions Apache Subversion versions 1.4.0 through 1.7.13 Apache Subversion versions 1.8.0 through 1.8.4 Description The issue allows remote attackers to bypass intended access restrictions and possibly cause a denial of service via a relative URL in a...

Apache Subversion 'mod_dav_svn' log REPORT Request DoS Vulnerability

Apache Subversion is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1884

The moddavsvn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service segmentation fault and crash via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable...

CVE-2013-1884

The moddavsvn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service segmentation fault and crash via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable...

CVE-2013-1884

The moddavsvn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service segmentation fault and crash via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable...

CVE-2013-1884: Improper Restriction of Operations within the Bounds of a Memory Buffer

The moddavsvn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service segmentation fault and crash via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable...

CVE-2013-2274

Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report...

CVE-2013-2274

Removed by vendor...

PT-2013-1231

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.x through 2.6.17 Puppet Enterprise versions 1.2.x through 1.2.6 Puppet versions prior to 2.7.23 Description The issue allows remote authenticated users to execute arbitrary code on the puppet master or an agent with puppet...

CVE-2013-2274: Undefined Security Weakness

Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report...

PT-2013-3449

Name of the Vulnerable Software and Affected Versions Subversion versions 1.7.0 through 1.7.8 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash of the Apache HTTPD server module. This is achieved by sending a log REPORT request...