Apache Subversion 1.4.x - 1.7.12 / 1.8.x < 1.8.3 Multiple Symlink File Overwrite Vulnerabilities

The version of Subversion Server installed on the remote host is prior to version 1.8.3. It is, therefore, affected by multiple symlink file overwrite vulnerabilities : - An error exists in the function 'handleoptions' in the file 'svnwcsub.py' that could allow a local attacker to use a symlink...

Apache Subversion 1.4.x - 1.7.13 / 1.8.x < 1.8.5 Multiple DoS

The installed version of Subversion Server is affected by multiple denial of service vulnerabilities : - An error exists related to the 'moddontdothat' module and handling relative URLs sent from serf-based clients. CVE-2013-4505 - An error exists related to the 'moddavsvn' module and handling...

DEBIAN-CVE-2013-4277

Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option...

shopex. cn 3 source code download, leak of sensitive information vulnerability and the Fix-vulnerability warning-the black bar safety net

Brief Description: can be URL Direct Download or view the Web App directory structure, source code, Subversion server address, permission to modify the program of the account and other information. Vulnerability to prove: Solution: delete/filter all . svn directory, to restrict access . svn...

[shopex.cn] - 3 处源代码下载、泄漏敏感信息漏洞

简要描述： 可通过 URL 直接下载或查看 Web 程序目录结构、源代码、 Subversion 服务器地址、有权限修改程序的账号等信息。 详细说明： 漏洞证明： http://dev.shopex.cn/.svn/entries http://book.shopex.cn/.svn/entries http://jnc.saas-telcom.shopex.cn/.svn/entries...

Fedora 13 : subversion-1.6.13-1.fc13 (2010-16136)

This update includes the latest stable release of Subversion, version 1.6.13. Subversion servers up to 1.6.12 inclusive making use of the 'SVNPathAuthz shortcircuit' moddavsvn configuration setting have a bug which may allow users to write and/or read portions of the repository to which they are...

TortoiseSVN < 1.5.6 / 1.6.0-1.6.3 Multiple Integer Overflows

Binary data 5139.prm...

Apache Subversion < 1.6.4 'libsvn_delta' Library Binary Delta svndiff Stream Parsing Multiple Overflows

The installed version of Subversion Client or Server is affected by multiple heap overflow issues. Specifically, the 'libsvndelta' library fails to perform sufficient boundary checks before processing certain svndiff streams. An attacker with commit access to a vulnerable Subversion server can...

Subversion libsvn_delta库整数溢出漏洞

BUGTRAQ ID: 35983 CVECAN ID: CVE-2009-2411 Subversion是一款开放源码的多用户版本控制系统，支持非ASCII 文本和二进制数据。 Subversion的libsvndelta库没有充分地验证svndiff流，处理带有超大窗口的流可能触发最终可导致堆溢出的整数溢出漏洞。拥有对代码库commit访问权限的攻击者可以利用这个漏洞在Subversion Server服务器上执行任意代码。 Subversion Subversion 1.5.7 Subversion Subversion 1.6.0 - 1.6.3 厂商补丁： Subversion...

Subversion Server Detection

The remote host is running the Subversion server. Subversion is a software product which is similar to CVS in that it manages file revisions and can be accessed across a network by multiple clients. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...