CVE-2013-2088: Improper Input Validation

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename...

PT-2013-4864

Name of the Vulnerable Software and Affected Versions Subversion versions 1.7.0 through 1.7.10 Subversion versions 1.8.x before 1.8.1 Description The issue allows remote authenticated users to cause a denial of service, potentially resulting in an assertion failure or out-of-bounds read. This can...

CVE-2013-4131: Improper Restriction of Operations within the Bounds of a Memory Buffer

The moddavsvn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service assertion failure or out-of-bounds read via a certain 1 COPY, 2 DELETE, or 3 MOVE request against a revision root...

CVE-2013-2112: Undefined Security Weakness

The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service exit by aborting a connection...

FreeBSD : subversion -- remotely triggerable 'Assertion failed' DoS vulnerability or read overflow. (2ae24334-f2e6-11e2-8346-001e8c75030d)

Subversion Project reports : Subversion's moddavsvn Apache HTTPD server module will trigger an assertion on some requests made against a revision root. This can lead to a DoS. If assertions are disabled it will trigger a read overflow which may cause a SEGFAULT or equivalent or undefined behavior...

Apache Subversion < 1.6.21 / 1.7.x < 1.7.9 Multiple DoS

Binary data 6943.prm...

Apache Subversion < 1.6.21 / 1.7.x < 1.7.9 Multiple DoS

Binary data 801403.prm...

CVE-2013-1879

Cross-site scripting XSS vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."...

subversion -- remotely triggerable "Assertion failed" DoS vulnerability or read overflow.

Subversion Project reports: Subversion's moddavsvn Apache HTTPD server module will trigger an assertion on some requests made against a revision root. This can lead to a DoS. If assertions are disabled it will trigger a read overflow which may cause a SEGFAULT or equivalent or undefined behavior...

SuSE 10 Security Update : subversion (ZYPP Patch Number 8628)

This update of subversion fixes two potential DoS vulnerabilities bug821505, CVE-2013-1968 / CVE-2013-2112. - Server-side bugfixes : - fix FSFS repository corruption due to newline in filename issue 4340 - fix svnserve exiting when a client connection is aborted r1482759 - Other tool improvements...

Apache Subversion < 1.6.23 / 1.7.x < 1.7.10 Multiple Remote DoS

The installed version of Apache Subversion Server is prior to 1.6.23 or 1.7.x prior to 1.7.10. It is, therefore, affected by multiple remote denial of service vulnerabilities : - A flaw exists when handling specially crafted filenames that could result in corruption of the FSFS repository. A...

Oracle Linux 5 / 6 : subversion (ELSA-2013-0737)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0737 advisory. - add security fixes for CVE-2013-1846, CVE-2013-1847, CVE-2013-1849 947372 Tenable has extracted the preceding description block directly from the...

Fedora 19 : subversion-1.7.10-1.fc19 (2013-9981)

This update includes the latest upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Oracle Linux 6 : subversion (ELSA-2011-0328)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0328 advisory. 1.6.11-2.3 - add security fix for CVE-2011-0715 681173 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 : subversion (ELSA-2011-0258)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0258 advisory. - add security fixes for CVE-2010-4644, CVE-2010-4539 672678 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : subversion (ELSA-2011-0257)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0257 advisory. 1.6.11-7.1 - add security fixes for CVE-2010-4644, CVE-2010-4539 672676 Tenable has extracted the preceding description block directly from the Oracle...

KLA10069 DoS vulnerability in Apache Subversion

An assertion failure vulnerability was found in Apache Subversion. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to moddavsvn via a specially designed URL. Original advisories Apache bulletin...

Oracle Linux 5 : subversion (ELSA-2009-1203)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1203 advisory. 1.4.2-4.0.1.el53.1 - Add oracle-enterprise.patch 1.4.2-4.el53.1 - add security fix for CVE-2009-2411 515817 Tenable has extracted the preceding description bloc...

Oracle Linux 4 : subversion (ELSA-2011-0861)

From Red Hat Security Advisory 2011:0861 : Updated subversion packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

Oracle Linux 5 / 6 : subversion (ELSA-2011-0862)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0862 advisory. 1.6.11-2.4 - add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 709220 Tenable has extracted the preceding description block direct...