CVE-2013-1847

The moddavsvn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an anonymous LOCK for a URL that does not exist...

Apache Subversion mod_dav_svn DoS via MKACTIVITY/PROPFIND

Subversion MKACTIVITY Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 libsvnfs's svnfsfilelength fun tested on 1.6.17 and few others gdb where 0 0x00007f2595db9d60 in svnfsfilelength from /usr/lib/x8664-linux-gnu/libsvnfs-1.so.1 1 0x00007f25961f2d...

Subversion 1.6.17 Denial Of Service

Subversion MKACTIVITY Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 libsvnfs's svnfsfilelength fun tested on 1.6.17 and few others gdb where 0 0x00007f2595db9d60 in svnfsfilelength from /usr/lib/x8664-linux-gnu/libsvnfs-1.so.1 1 0x00007f25961f2d...

PT-2013-3495

Name of the Vulnerable Software and Affected Versions Subversion versions prior to 1.6.23 Subversion versions 1.7.x prior to 1.7.10 Description The issue allows remote authenticated users to cause a denial of service by corrupting the FSFS repository. This is due to incorrect handling of file...

PT-2013-3543

Name of the Vulnerable Software and Affected Versions Subversion versions prior to 1.6.23 Subversion versions 1.7.x prior to 1.7.10 Description The issue is related to the svnserve server in Subversion, which does not properly handle aborted connection messages. This can be exploited by remote...

Apache Subversion < 1.6.21 / 1.7.x < 1.7.9 DoS

Binary data 8121.prm...

PT-2013-3430

Name of the Vulnerable Software and Affected Versions Subversion versions 1.6.0 through 1.6.20 Subversion versions 1.7.0 through 1.7.8 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved by...

PT-2013-3429

Name of the Vulnerable Software and Affected Versions Subversion versions 1.6.x through 1.6.21 Subversion versions 1.7.0 through 1.7.8 Description The issue allows remote authenticated users to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved...

PT-2013-3449

Name of the Vulnerable Software and Affected Versions Subversion versions 1.7.0 through 1.7.8 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash of the Apache HTTPD server module. This is achieved by sending a log REPORT request...

PT-2013-3428

Name of the Vulnerable Software and Affected Versions Subversion versions 1.6.x through 1.6.20 Subversion versions 1.7.0 through 1.7.8 Description The issue allows remote authenticated users to cause a denial of service by setting or deleting a large number of properties for a file or directory,...

PT-2013-3431

Name of the Vulnerable Software and Affected Versions Subversion versions 1.6.x through 1.6.20 Subversion versions 1.7.0 through 1.7.8 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, via a PROPFIND request for an...

VMware Movie Decoder < 9.0 Path Subversion Arbitrary DLL Injection Code Execution (VMSA-2012-0014)

The version of VMware Movie Decoder installed on the remote host is earlier than 9.0 and is, therefore, affected by a DLL loading vulnerability. This issue potentially allows for a local attacker to execute custom code by writing a malicious executable into the same directory as the VMware Movie...

Security release: symfony 1.4.20 released

symfony 1.4.20 has just been released and it contains a security fix. Uli Hecht contacted us a couple of days ago about a security issue in symfony 1.4. The vulnerability allows reading any file stored on the server if it is readable by the web server. Your application is vulnerable if there is a...

[SECURITY] Fedora 18 Update: viewvc-1.1.17-2.fc18

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

[SECURITY] Fedora 16 Update: viewvc-1.1.17-1.fc16

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

[SECURITY] Fedora 17 Update: viewvc-1.1.17-1.fc17

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

Fedora Update for viewvc FEDORA-2012-16673

Check for the Version of viewvc OpenVAS Vulnerability Test Fedora Update for viewvc FEDORA-2012-16673 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Debian Security Advisory DSA 2563-1 (viewvc)

The remote host is missing an update to viewvc announced via advisory DSA 2563-1. OpenVAS Vulnerability Test $Id: deb25631.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2563-1 viewvc Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] [DSA 2563-1] viewvc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2563-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...

Debian DSA-2563-1 : viewvc - several vulnerabilities

Several vulnerabilities were found in ViewVC, a web interface for CVS and Subversion repositories. - CVE-2009-5024 Remote attackers can bypass the cvsdb rowlimit configuration setting, and consequently conduct resource-consumption attacks via the limit parameter. - CVE-2012-3356 The remote...