PT-2011-1048 · Viewvc · Viewvc

Name of the Vulnerable Software and Affected Versions: ViewVC versions 1.0.x through 1.0.12 ViewVC versions 1.1.x through 1.1.15 Description: The issue allows remote authenticated users with repository commit access to inject arbitrary web script or HTML. This can be achieved via the function nam...

SVN < 1.5.6 / 1.6.0-1.6.3 Multiple Integer Overflows (deprecated)

Binary data 5140.prm...

GLSA-200908-05 : Subversion: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200908-05 Subversion: Remote execution of arbitrary code Matt Lewis of Google reported multiple integer overflows in the libsvndelta library, possibly leading to heap-based buffer overflows. Impact : A remote attacker with commit...

Subversion: Remote execution of arbitrary code

Background Subversion is a versioning system designed to be a replacement for CVS. Description Matt Lewis of Google reported multiple integer overflows in the libsvndelta library, possibly leading to heap-based buffer overflows. Impact A remote attacker with commit access could exploit this...

Subversion libsvn_delta库整数溢出漏洞

BUGTRAQ ID: 35983 CVECAN ID: CVE-2009-2411 Subversion是一款开放源码的多用户版本控制系统，支持非ASCII 文本和二进制数据。 Subversion的libsvndelta库没有充分地验证svndiff流，处理带有超大窗口的流可能触发最终可导致堆溢出的整数溢出漏洞。拥有对代码库commit访问权限的攻击者可以利用这个漏洞在Subversion Server服务器上执行任意代码。 Subversion Subversion 1.5.7 Subversion Subversion 1.6.0 - 1.6.3 厂商补丁： Subversion...

ikiwiki -- improper symlink verification vulnerability

The ikiwiki development team reports: Ikiwiki did not check if path to the srcdir to contained a symlink. If an attacker had commit access to the directories in the path, they could change it to a symlink, causing ikiwiki to read and publish files that were not intended to be published. But not...

CVE-2004-1471

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in a wrapper line...