Slackware 13.0 / 13.1 / 13.37 / 14.0 / current : subversion (SSA:2013-095-01)

New subversion packages are available for Slackware 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-095-01. The text itsel...

mod_dav_svn, subversion security update

CentOS Errata and Security Advisory CESA-2013:0737 Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System...

(mod_dav_svn): DoS (crash) via LOCK requests against a non-existent URL

The moddavsvn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an anonymous LOCK for a URL that does not exist...

(mod_dav_svn): DoS (crash) via PROPFIND request made against activity URLs

The moddavsvn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a PROPFIND request for an activity URL...

(mod_dav_svn): DoS (excessive memory use) when large number of properties are set or deleted

The moddavsvn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service memory consumption by 1 setting or 2 deleting a large number of properties for a file or directory...

Moderate: Red Hat Security Advisory: subversion security update

Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

(mod_dav_svn): DoS (crash) via LOCK requests against an activity URL

The moddavsvn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service NULL pointer dereference and crash via a LOCK on an activity URL...

subversion security update

1.6.11-9 - add security fixes for CVE-2013-1846, CVE-2013-1847, CVE-2013-1849 947372 1.6.11-8 - add security fix for CVE-2013-1845 947372...

Subversion multiple security vulnerabilities

Multiple DoS conditions...

[slackware-security] subversion (SSA:2013-095-01)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security subversion SSA:2013-095-01 New subversion packages are available for Slackware 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: +--------------------------+...

FreeBSD : Subversion -- multiple vulnerabilities (b6beb137-9dc0-11e2-882f-20cf30e32f6d)

Subversion team reports : Subversion's moddavsvn Apache HTTPD server module will use excessive amounts of memory when a large number of properties are set or deleted on a node. Subversion's moddavsvn Apache HTTPD server module will crash when a LOCK request is made against activity URLs...

[Ghost Phisher] GUI suite for phishing and penetration attacks

Ghost Phisher is a Wireless and Ethernet security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library, the program is able to emulate access points and deploy various internal networking servers for networking, penetration testing and...

subversion

New subversion packages are available for Slackware 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/subversion-1.7.9-i486-1slack14.0.txz: Upgraded. This update fixes some denial of service bugs: moddavsvn...

Apache Subversion - Remote Denial of Service

Apache Subversion - Remote Denial of Service source: https://www.securityfocus.com/bid/58898/info Apache Subversion is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application, resulting in denial-of-service conditions. Apache Subversion version...

Apache Subversion 1.6.x - mod_dav_svnlock.c Remote Denial of Service

Apache Subversion 1.6.x - moddavsvnlock.c Remote Denial of Service source: https://www.securityfocus.com/bid/58897/info Apache Subversion is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application, resulting in denial-of-service conditions...

Subversion -- multiple vulnerabilities

Subversion team reports: Subversion's moddavsvn Apache HTTPD server module will use excessive amounts of memory when a large number of properties are set or deleted on a node. Subversion's moddavsvn Apache HTTPD server module will crash when a LOCK request is made against activity URLs...

Apache Subversion - Remote Denial of Service

source: https://www.securityfocus.com/bid/58898/info Apache Subversion is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application, resulting in denial-of-service conditions. Apache Subversion versions 1.7.0 through 1.7.8 are vulnerable. curl -X...

Apache Subversion 1.6.x - 'mod_dav_svn/lock.c' Remote Denial of Service

source: https://www.securityfocus.com/bid/58897/info Apache Subversion is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application, resulting in denial-of-service conditions. Apache Subversion versions 1.6.0 through 1.6.20 and 1.7.0 through 1.7....

CVE-2013-1846

The moddavsvn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service NULL pointer dereference and crash via a LOCK on an activity URL...

CVE-2013-1847

The moddavsvn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an anonymous LOCK for a URL that does not exist...