[SECURITY] [DLA 428-1] websvn security update

Package : websvn Version : 2.3.1-1+deb6u2 CVE ID : CVE-2016-2511 It was discovered that there was a cross-site scripting vulnerability in websvn, a web-based Subversion repository browser For Debian 6 Squeeze, this issue has been fixed in websvn version 2.3.1-1+deb6u2. Regards, - -- ,. : : : Chri...

DSA-3490-1 websvn - security update

Bulletin has no description...

PT-2016-5173

Name of the Vulnerable Software and Affected Versions WebSVN versions 2.3.3 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the path parameter to "log.php" API endpoint. Recommendations For WebSVN versions 2.3.3 and earlier, consider updating t...

WebSVN 2.3.3 Cross Site Scripting

Title: WebSVN - Reflected Cross-Site Scripting Author: Jakub Palaczynski Date: 22. February 2016 CVE: CVE-2016-2511 Affected software: ================== WebSVN 2.3.3 Older versions are probably also vulnerable. Description: ============ WebSVN offers a view onto your subversion repositories that...

websvn -- reflected cross-site scripting

Sebastien Delafond reports: Jakub Palaczynski discovered that websvn, a web viewer for Subversion repositories, does not correctly sanitize user-supplied input, which allows a remote user to run reflected cross-site scripting attacks...

Debian DLA-136-1 : websvn security update

James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby access any file on disk readable by the user the webserver runs as. NOTE: Tenable Netwo...

Fedora 21 : websvn-2.3.3-8.fc21 (2015-1465)

Security fix for CVE-2013-6892 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 20 : websvn-2.3.3-8.fc20 (2015-1439)

Security fix for CVE-2013-6892 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for websvn FEDORA-2015-1439

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for websvn FEDORA-2015-1465

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: websvn-2.3.3-8.fc20

WebSVN offers a view onto your subversion repositories that's been designed to reflect the Subversion methodology. You can view the log of any file or directory and see a list of all the files changed, added or deleted in any given revision. You can also view the differences between two versions ...

[SECURITY] Fedora 21 Update: websvn-2.3.3-8.fc21

WebSVN offers a view onto your subversion repositories that's been designed to reflect the Subversion methodology. You can view the log of any file or directory and see a list of all the files changed, added or deleted in any given revision. You can also view the differences between two versions ...

Debian DSA-3137-1 : websvn - security update

James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby access any file on disk readable by the user the webserver runs as. %NASLMINLEVEL 70300...

[SECURITY] [DLA 136-1] websvn security update

Package : websvn Version : 2.3.3-1+deb6u1 CVE ID : CVE-2013-6892 Debian Bug : 775682 James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby...

[SECURITY] [DSA 3137-1] websvn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3137-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3137-1] websvn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3137-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 24, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3137-1 (websvn - security update)

James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby access any file on disk readable by the user the webserver runs as. OpenVAS Vulnerabili...

DSA-3137-1 websvn - security update

Bulletin has no description...

DLA-136-1 websvn - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3137-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...