Subversion < 1.0.4 Pre-Commit-Hook Remote Overflow

The remote host is reported vulnerable to a remote overflow. An attacker, exploiting this hole, would be given full access to the target machine. Versions of Subversion less than 1.0.4 are vulnerable to this attack. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription...

CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

CVE-2004-0397

CVE-2004-0397 affects Subversion up to 1.0.2. A stack-based overflow occurs in the apr_time_t date conversion code, exploitable remotely via svnserver over svn:// (and via DAV2 REPORT/get-dated-rev commands). Consequences include remote arbitrary code execution. Remediation indicated by connected...

Buffer overflow in Subversion

Background Subversion is a version control system intended to eventually replace CVS. Like CVS, it has an optional client-server architecture where the server can be an Apache server running modsvn, or an ssh program as in CVS's :ext: method. In addition to supporting the features found in CVS,...

[Full-Disclosure] Advisory 08/2004: Subversion remote vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Subversion remote vulnerability Release Date: 2004/05/19 Last Modified: 2004/05/19 Author: Stefan Esser [email protected] Application: Subversion = 1.0.2 Severity: A vulnerability...

Subversion 1.0.2 Date Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Subversion 1.0.2 - Date Overflow (Metasploit)

Subversion 1.0.2 - Date Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ requir...

subversion date parsing vulnerability

Stefan Esser reports: Subversion versions up to 1.0.2 are vulnerable to a date parsing vulnerability which can be abused to allow remote code execution on Subversion servers and therefore could lead to a repository compromise. NOTE: This vulnerability is similar to the date parsing issue that...

Subversion 1.0.2 - Date Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'msf/core/exploit/http'...

void.at - neon format string bugs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VSA0401 - neon - void.at security notice Overview ======== We have discovered a format string vulnerability in neon http://www.webdav.org/neon. neon is a webdav client library, used by Subversion and others. CVE has assigned the name CAN-2004-0179 to...

CVE-2004-0179

CVE-2004-0179 involves multiple format-string vulnerabilities in neon 0.24.4 and earlier, and in other products that use neon (Cadaver, Subversion, OpenOffice). The underlying issue is format-string bugs in neon’s error reporting code, which could allow a remote attacker—via a malicious WebDAV se...

Important: Red Hat Security Advisory: : Updated Subversion packages fix security vulnerability in neon

Updated Subversion packages that fix a vulnerability in neon, exploitable by a malicious DAV server, are now available. Subversion is a concurrent version control system that uses inbuilt code from neon, an HTTP and WebDAV client library. Versions of the neon client library up to and including...

[Full-Disclosure] [RHSA-2004:159-01] Updated Subversion packages fix security vulnerability in neon

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated Subversion packages fix security vulnerability in neon Advisory ID: RHSA-2004:159-01 Issue date: 2004-04-15 Updated on: 2004-04-15...

security flaw

Multiple format string vulnerabilities in 1 neon 0.24.4 and earlier, and other products that use neon including 2 Cadaver, 3 Subversion, and 4 OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code...

[SECURITY] [DSA 079-2] New UUCP packages finally fix uucp uid/gid access

-------------------------------------------------------------------------- Debian Security Advisory DSA 079-2 [email protected] http://www.debian.org/security/ Martin Schulze February 8th, 2002 - -------------------------------------------------------------------------- Package : uucp...