CVE-2013-1879

Cross-site scripting XSS vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."...

subversion -- remotely triggerable "Assertion failed" DoS vulnerability or read overflow.

Subversion Project reports: Subversion's moddavsvn Apache HTTPD server module will trigger an assertion on some requests made against a revision root. This can lead to a DoS. If assertions are disabled it will trigger a read overflow which may cause a SEGFAULT or equivalent or undefined behavior...

SuSE 10 Security Update : subversion (ZYPP Patch Number 8628)

This update of subversion fixes two potential DoS vulnerabilities bug821505, CVE-2013-1968 / CVE-2013-2112. - Server-side bugfixes : - fix FSFS repository corruption due to newline in filename issue 4340 - fix svnserve exiting when a client connection is aborted r1482759 - Other tool improvements...

Apache Subversion < 1.6.23 / 1.7.x < 1.7.10 Multiple Remote DoS

The installed version of Apache Subversion Server is prior to 1.6.23 or 1.7.x prior to 1.7.10. It is, therefore, affected by multiple remote denial of service vulnerabilities : - A flaw exists when handling specially crafted filenames that could result in corruption of the FSFS repository. A...

Oracle Linux 5 / 6 : subversion (ELSA-2011-0862)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0862 advisory. 1.6.11-2.4 - add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 709220 Tenable has extracted the preceding description block direct...

Oracle Linux 5 : subversion (ELSA-2011-0257)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0257 advisory. 1.6.11-7.1 - add security fixes for CVE-2010-4644, CVE-2010-4539 672676 Tenable has extracted the preceding description block directly from the Oracle...

KLA10069 DoS vulnerability in Apache Subversion

An assertion failure vulnerability was found in Apache Subversion. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to moddavsvn via a specially designed URL. Original advisories Apache bulletin...

Oracle Linux 5 : subversion (ELSA-2009-1203)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1203 advisory. 1.4.2-4.0.1.el53.1 - Add oracle-enterprise.patch 1.4.2-4.el53.1 - add security fix for CVE-2009-2411 515817 Tenable has extracted the preceding description bloc...

Oracle Linux 6 : subversion (ELSA-2011-0258)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0258 advisory. - add security fixes for CVE-2010-4644, CVE-2010-4539 672678 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : subversion (ELSA-2011-0327)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0327 advisory. 1.6.11-7.3 - add fix for svnadmin hotcopy 681522 1.6.11-7.2 - add security fix for CVE-2011-0715 681171 Tenable has extracted the preceding description block...

Oracle Linux 6 : subversion (ELSA-2011-0328)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0328 advisory. 1.6.11-2.3 - add security fix for CVE-2011-0715 681173 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 4 : subversion (ELSA-2011-0861)

From Red Hat Security Advisory 2011:0861 : Updated subversion packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

Oracle Linux 5 / 6 : subversion (ELSA-2013-0737)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0737 advisory. - add security fixes for CVE-2013-1846, CVE-2013-1847, CVE-2013-1849 947372 Tenable has extracted the preceding description block directly from the...

Fedora 19 : subversion-1.7.10-1.fc19 (2013-9981)

This update includes the latest upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

DEBIAN-CVE-2013-1896

moddav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service segmentation fault via a MERGE request in which the URI is configured for handling by the moddavsvn module, but a certain href...

Ubuntu: Security Advisory (USN-1893-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for subversion USN-1893-1

Check for the Version of subversion OpenVAS Vulnerability Test $Id: gbubuntuUSN18931.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for subversion USN-1893-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu 12.04 LTS / 12.10 / 13.04 : subversion vulnerabilities (USN-1893-1)

Alexander Klink discovered that the Subversion moddavsvn module for Apache did not properly handle a large number of properties. A remote authenticated attacker could use this flaw to cause memory consumption, leading to a denial of service. CVE-2013-1845 Ben Reser discovered that the Subversion...

USN-1893-1: Subversion vulnerabilities

Alexander Klink discovered that the Subversion moddavsvn module for Apache did not properly handle a large number of properties. A remote authenticated attacker could use this flaw to cause memory consumption, leading to a denial of service. CVE-2013-1845 Ben Reser discovered that the Subversion...

Updated subversion packages fix security vulnerabilities

Subversion repositories with the FSFS repository data store format can be corrupted by newline characters in filenames. A remote attacker with a malicious client could use this flaw to disrupt the service for other users using that repository CVE-2013-1968. Subversion's svnserve server process ma...