PT-2019-2954

Name of the Vulnerable Software and Affected Versions Apache Subversion versions up to and including 1.9.10 Apache Subversion versions up to and including 1.10.4 Apache Subversion versions up to and including 1.12.0 Description The issue is related to the svnserve server process in Apache...

EulerOS 2.0 SP8 : subversion (EulerOS-SA-2019-1789)

According to the version of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Subversion's moddavsvn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the...

Apache Subversion 1.10.x < 1.10.4 / 1.11.x < 1.11.1 mod_dav_svn DoS

The installed version of Subversion Server is 1.10.x prior to 1.10.4 or 1.11.x prior to 1.11.1 and is, therefore, affected by a denial of service DoS vulnerability. A flaw exists in the implementation of moddavsvn due to failing to validate the root path of the directory listing provided by the...

Code injection

Computrols CBAS 18.0.0 allows unprotected Subversion SVN directory / source code disclosure...

CVE-2019-10849

Computrols CBAS 18.0.0 allows unprotected Subversion SVN directory / source code disclosure...

CVE-2019-10849

Computrols CBAS 18.0.0 allows unprotected Subversion SVN directory / source code disclosure...

CVE-2019-10849: Missing Authorization

Computrols CBAS 18.0.0 allows unprotected Subversion SVN directory / source code disclosure...

PT-2019-12053

Name of the Vulnerable Software and Affected Versions Computrols CBAS version 18.0.0 Description The issue allows for unprotected Subversion SVN directory and source code disclosure. Recommendations For Computrols CBAS version 18.0.0, consider restricting access to the SVN directory to minimize t...

Server Side Request Forgery in Apache Axis

A Server Side Request Forgery SSRF vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2...

Server Side Request Forgery in Apache Axis

A Server Side Request Forgery SSRF vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2...

Spoofable Server

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. The moddavsvn module is used with the Apache HTTP Server to allow access to Subversion...

Denial Of Service (DoS)

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. The moddavsvn module is used with the Apache HTTP Server to allow access to Subversion...

Denial Of Service (DoS)

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. The moddavsvn module is used with the Apache HTTP Server to allow access to Subversion...

Denial Of Service (DoS)

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. The moddavsvn module is used with the Apache HTTP Server to allow access to Subversion...

Denial Of Service (DoS)

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. The moddavsvn module is used with the Apache HTTP Server to allow access to Subversion...

Server side request forgery (ssrf)

A Server Side Request Forgery SSRF vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2...

GLSA-201904-08 : Subversion: Denial of service

The remote host is affected by the vulnerability described in GLSA-201904-08 Subversion: Denial of service A vulnerability was discovered in Subversions moddavsvn, that could lead to a Denial of Service Condition. Impact : An attacker could cause a possible enial of Service condition. Workaround ...

Subversion: Denial of service

Background Subversion is a version control system intended to eventually replace CVS. Like CVS, it has an optional client-server architecture where the server can be an Apache server running modsvn, or an ssh program as in CVS’s :ext: method. In addition to supporting the features found in CVS,...

OPENSUSE-SU-2019:0153-1 Security update for subversion

This update for subversion fixes the following issues: Security issue fixed: - CVE-2018-11803: Fixed a vulnerability that allowed malicious SVN clients to trigger a crash in moddavsvn by omitting the root path from a recursive directory listing request bsc1122842 This update was imported from the...

Fedora Update for subversion FEDORA-2019-1f81367ac3

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...