RHEL 4 : subversion (RHSA-2011:0861)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0861 advisory. - subversion moddavsvn: DoS crash via request to deliver baselined WebDAV resources CVE-2011-1752 Note that Nessus has not tested for this issue but...

Ecava IntegraXor Path Subversion Arbitrary DLL Injection Code Execution

Binary data scadaintegraxor3604081.nbin...

(mod_dav_svn): DoS (crash) via request to deliver baselined WebDAV resources

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

(mod_dav_svn): DoS (crash) via request to deliver baselined WebDAV resources

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

Moderate: Red Hat Security Advisory: subversion security update

Updated subversion packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

subversion security update

1.6.11-2.4 - add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 709220...

subversion security update

1.1.4-4.0.1 - RHAT logo removed updated redhat.png in tarball 1.1.4-4 - add security fix for CVE-2011-1752 709217...

CVE-2011-1783

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is enabled, allows remote attackers to cause a denial of service infinite loop and memory consumption in opportunistic circumstances by...

DEBIAN-CVE-2011-1752

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

CVE-2011-1921

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to...

CVE-2011-1921

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to...

CVE-2011-1921

CVE-2011-1921 affects the Subversion mod_dav_svn Apache module in Subversion 1.5.x/1.6.x before 1.6.17. When SVNPathAuthz short_circuit is disabled, it fails to enforce permissions for files that were publicly readable in the past, allowing remote attackers to read sensitive information via a rep...

CVE-2011-1752

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

USN-1144-1: Subversion vulnerabilities

Joe Schaefer discovered that the Subversion moddavsvn module for Apache did not properly handle certain baselined WebDAV resource requests. A remote attacker could use this flaw to cause the service to crash, leading to a denial of service. CVE-2011-1752 Ivan Zhakov discovered that the Subversion...

Mandriva Update for subversion MDVSA-2011:106 (subversion)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

VulnCheck KEV: CVE-2011-1752

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

Mandriva Linux Security Advisory : subversion (MDVSA-2011:106)

Multiple vulnerabilities were discovered and corrected in subversion : The moddavsvn Apache HTTPD server module will dereference a NULL pointer if asked to deliver baselined WebDAV resources which can lead to a DoS Denial Of Service CVE-2011-1752. The moddavsvn Apache HTTPD server module may in...

Mandriva Update for subversion MDVSA-2011:106 (subversion)

Check for the Version of subversion OpenVAS Vulnerability Test Mandriva Update for subversion MDVSA-2011:106 subversion Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Subversion 'mod_dav_svn'拒绝服务和信息泄露漏洞

Bugtraq ID: 48091 CVE ID：CVE-2011-1752,CVE-2011-1783,CVE-2011-1921 Subversion是一款自由/开源版本控制系统。 Subversion存在多个安全漏洞，允许攻击者进行拒绝服务攻击或泄露敏感信息。 -处理基线资源请求时moddavsvn模块存在空指针引用错误，攻击者可以提交恶意请求可导致服务崩溃。 此漏洞影响1.6.16和之前版本。 -处理部分基于路径的访问控制规则时moddavsvn模块存在错误，可触发死循环并消耗大量内存，造成拒绝服务攻击。 此漏洞影响1.5.0到1.6.16之间的版本。...

WebSVN 2.3.2 - Unproper Metacharacters Escaping exec() Remote Command Injection

WebSVN 2.3.2 - Unproper Metacharacters Escaping exec Remote Command Injection WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction:...