subversion: revision properties disclosure to user with partial access

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information revision properties via svn 1 propget, 2 proplist, or 3 propedit...

Low: Red Hat Enhancement Advisory: subversion enhancement update

Updated subversion packages that upgrade Subversion to upstream version 1.6.11 and provide two enhancements are now available for Red Hat Enterprise Linux 5. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a...

[BSA-017] Security Update for subversion

Sven Hoexter uploaded new packages for subversion which fixed the following security problems: CVE-2010-4539 A NULL pointer dereference flaw exisits in moddavsvn, the Apache httpd module for the Subversion server, when listing of repositories SVNListParentPath directive is enabled. A remote user...

CVE-2010-4644

Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...

CVE-2010-4644

Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...

DEBIAN-CVE-2010-4644

Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...

DEBIAN-CVE-2010-4539

The walk function in repos.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via vectors that trigger the walking of SVNParentPath...

Command injection

Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...

CVE-2010-4644

Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...

CVE-2010-4644

CVE-2010-4644 : In Apache Subversion, memory leaks in rev_hunt.c for versions before 1.6.15 can be exploited by remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command. Multiple connected advisories (e.g., MiracleLinux A...

CVE-2010-4644

Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...

CVE-2010-4644

Multiple memory leaks in revhunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service memory consumption and daemon crash via the -g option to the blame command...

subversion -- multiple DoS

Entry for CVE-2010-4539 says: The walk function in repos.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via vectors that trigger the...

shopex. cn 3 source code download, leak of sensitive information vulnerability and the Fix-vulnerability warning-the black bar safety net

Brief Description: can be URL Direct Download or view the Web App directory structure, source code, Subversion server address, permission to modify the program of the account and other information. Vulnerability to prove: Solution: delete/filter all . svn directory, to restrict access . svn...

Adobe Illustrator Path Subversion Arbitrary DLL Injection Code Execution (APSB10-29)

The version of Adobe Illustrator installed on the remote host is earlier than 15.0.2. Such versions insecurely look in their current working directory when resolving DLL and file dependencies, such as for 'aires.dll'. If a malicious DLL with the same name as a required DLL is located in the...

McAfee VirusScan Enterprise Path Subversion Arbitrary DLL Injection Code Execution

The version of McAfee VirusScan Enterprise installed on the remote Windows host is earlier than 8.7i. Such versions insecurely look in their current working directory when resolving DLL dependencies, such as for 'traceapp.dll'. Attackers may exploit the issue by placing a specially crafted DLL fi...

Fedora Update for subversion FEDORA-2010-16148

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for subversion FEDORA-2010-16148

Check for the Version of subversion OpenVAS Vulnerability Test Fedora Update for subversion FEDORA-2010-16148 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Debian: Security Advisory (DSA-2118-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2118-1 (subversion)

The remote host is missing an update to subversion announced via advisory DSA 2118-1. OpenVAS Vulnerability Test $Id: deb21181.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2118-1 subversion Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...