KLA10808 Multiple vulnerabilities in Apache Subversion

Multiple serious vulnerabilities have been found in Apache Subversion. Malicious users can exploit these vulnerabilities to cause denial of service or bypass security restrictions. Below is a complete list of vulnerabilities 1. Null pointer dereference can be exploited by authenticated attacker t...

Apache Subversion Security Bypass Vulnerability

Apache Subversion is the United States Apache Apache Software Foundation of a set of open source version control system. The main role of the system is compatible with concurrent version management system CVS. A security bypass vulnerability exists in Apache Subversion versions 1.9.0 through 1.9....

Apache Subversion httpd Server Denial of Service Vulnerability

Apache Subversion is the United States Apache Apache Software Foundation of a set of open source version control system. The main role of the system is compatible with concurrent version management system CVS. httpd servers is one of the httpd server. A denial-of-service vulnerability exists in t...

Debian DLA-448-1 : subversion security update

CVE-2016-2167 svnserve, the svn:// protocol server, can optionally use the Cyrus SASL library for authentication, integrity protection, and encryption. Due to a programming oversight, authentication against Cyrus SASL would permit the remote user to specify a realm string which is a prefix of the...

Slackware 14.0 / 14.1 / current : subversion (SSA:2016-121-01)

New subversion packages are available for Slackware 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-121-01. The text itself is copyrigh...

Apache Subversion 1.7.x < 1.8.15, 1.9.x < 1.9.3 Multiple Vulnerabilities

Apache Subversion is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

Debian DSA-3561-1 : subversion - security update

Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-2167 Daniel Shahaf and James McCoy discovered that an implementation error in the authentication against the Cyrus SASL...

[SECURITY] [DLA 448-1] subversion security update

Package : subversion Version : 1.6.17dfsg-4+deb7u11 CVE ID : CVE-2016-2167 CVE-2016-2168 CVE-2016-2167 svnserve, the svn:// protocol server, can optionally use the Cyrus SASL library for authentication, integrity protection, and encryption. Due to a programming oversight, authentication against...

[slackware-security] subversion

New subversion packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/subversion-1.7.22-i486-2slack14.1.txz: Rebuilt. This update patches two security issues: CVE-2016-2167: svnserve/sasl may...

[SECURITY] [DSA 3561-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3561-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3561-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3561-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 29, 2016 https://www.debian.org/security/faq -...

PT-2016-5044

Name of the Vulnerable Software and Affected Versions Apache Subversion versions prior to 1.8.16 Apache Subversion versions 1.9.x prior to 1.9.4 Description The issue allows remote authenticated users to cause a denial of service, resulting in a crash, by sending a crafted header in a MOVE or COP...

Debian Security Advisory DSA 3561-1 (subversion - security update)

Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-2167 Daniel Shahaf and James McCoy discovered that an implementation error in the authentication against the Cyrus SASL...

DSA-3561-1 subversion - security update

Bulletin has no description...

PT-2016-5043

Name of the Vulnerable Software and Affected Versions Apache Subversion versions prior to 1.8.16 Apache Subversion versions 1.9.x prior to 1.9.4 Description The issue allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected...

FreeBSD : subversion -- multiple vulnerabilities (c8174b63-0d3a-11e6-b06e-d43d7eed0ce2)

Subversion project reports : svnserve, the svn:// protocol server, can optionally use the Cyrus SASL library for authentication, integrity protection, and encryption. Due to a programming oversight, authentication against Cyrus SASL would permit the remote user to specify a realm string which is ...

DLA-448-1 subversion - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3561-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

subversion -- multiple vulnerabilities

Subversion project reports: svnserve, the svn:// protocol server, can optionally use the Cyrus SASL library for authentication, integrity protection, and encryption. Due to a programming oversight, authentication against Cyrus SASL would permit the remote user to specify a realm string which is a...

Apache Subversion mod_dav_svn Integer Overflow Vulnerability

Apache Subversion is an open source version control system that is compatible with Concurrent Versions System CVS. An integer overflow vulnerability exists in the util.c file in Apache Subversion's moddavsvn. A remote attacker could submit a special skel-encoded request body for a denial of servi...