Fedora Core 2 : subversion-1.0.6-1 (2004-231)

This update includes the latest release of Subversion, including a security fix for an issue in the modauthzsvn Apache authentication module which could allow a read restriction for a portion of the repository to be bypassed by a user who has write access to a different portion of the repository...

Fedora Core 1 : subversion-0.32.1-2 (2004-127)

Stefan Esser discovered an issue in the date parsing routines in Subversion which allows a buffer overflow. An attacker could send malicious requests to a Subversion server either Apache-based using moddavsvn, or using the svnserve daemon and perform arbitrary execution of code. The Common...

Fedora Core 2 : subversion-1.0.2-2.1 (2004-128)

Stefan Esser discovered an issue in the date parsing routines in Subversion which allows a buffer overflow. An attacker could send malicious requests to a Subversion server either Apache-based using moddavsvn, or using the svnserve daemon and perform arbitrary execution of code. The Common...

Immunity Canvas: SVNDATE

Name| svndate ---|--- CVE| CVE-2004-0397 Exploit Pack| CANVAS Description| Subversion = 1.0.2 utf-8 Apache2/WebDAV stack vs. heap exploit Notes| CVE Name: CVE-2004-0397 VENDOR: Collabnet OSVDB: http://osvdb.org/displayvuln.php?osvdbid=6301 Repeatability: Multiple tries References:...

DEBIAN-CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

Subversion 1.0.2 - svn_time_from_cstring() Remote Overflow

Subversion 1.0.2 - svntimefromcstring Remote Overflow / subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in the svntimefromcstring function. We build a date format which is valid but at the same time exits after the sscanf function, or else it branches into another functio...

Subversion 1.0.2 - 'svn_time_from_cstring()' Remote Overflow

/ subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in the svntimefromcstring function. We build a date format which is valid but at the same time exits after the sscanf function, or else it branches into another function which segfaults at the aprpoolt pool. We overwrite o...

Subversion 1.0.2 svn_time_from_cstring() Remote Exploit

Exploit for linux platform in category remote exploits ======================================================= Subversion 1.0.2 svntimefromcstring Remote Exploit ======================================================= / subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in t...

CVE-2004-0413

CVE-2004-0413 affects Subversion 1.0.4 libraries (libsvn_ra_svn). The vulnerability arises because libsvn_ra_svn trusts the length field of svn://, svn+ssh://, and other svn protocol URL strings, enabling a remote attacker to trigger an integer overflow that leads to a heap-based buffer overflow....

CVE-2004-0413

libsvnrasvn in Subversion 1.0.4 trusts the length field of 1 svn://, 2 svn+ssh://, and 3 other svn protocol URL strings, which allows remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer...

CVE-2004-0413

libsvnrasvn in Subversion 1.0.4 trusts the length field of 1 svn://, 2 svn+ssh://, and 3 other svn protocol URL strings, which allows remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer...

Subversion < 1.0.5 svnserver svn:// Protocol Handler Remote Overflow

A remote overflow exists in Subversion. svnserver fails to validate svn:// requests resulting in a heap overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity. C Tenable Network Security, Inc. include"compat.inc"; if description...

Subversion/Chora buffer overflow

Stack overflow on parsing svn:// IRIs, heap overflow on stack parsing...

[Full-Disclosure] [ GLSA 200406-07 ] Subversion: Remote heap overflow

Gentoo Linux Security Advisory GLSA 200406-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Subversion: Remote heap overflow

Background Subversion is a revision control system that aims to be a "compelling replacement for CVS". It enjoys wide use in the open source community. svnserve allows access to Subversion repositories using URIs with the svn://, svn+ssh://, and other tunelled svn+:// protocols. Description The s...

Subversion Server Detection

The remote host is running the Subversion server. Subversion is a software product which is similar to CVS in that it manages file revisions and can be accessed across a network by multiple clients. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Subversion < 1.0.3 apr_time_t data Conversion Remote Overflow

The remote host is vulnerable to a remote stack-based overflow. An attacker, exploiting this hole, would be given full access to the target machine. Versions of Subversion less than 1.0.3 are vulnerable to this attack. This vulnerability was discovered by Stefan Esser and posted to public mailing...