PT-2011-3347

Name of the Vulnerable Software and Affected Versions Apache Subversion versions prior to 1.6.17 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via a request for a baselined WebDAV resource. This issue has been...

PT-2011-3364

Name of the Vulnerable Software and Affected Versions Apache Subversion versions 1.5.x through 1.6.16 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and memory consumption, under certain circumstances when the SVNPathAuthz short circuit...

Mandriva Linux Security Advisory : subversion (MDVSA-2011:106)

Multiple vulnerabilities were discovered and corrected in subversion : The moddavsvn Apache HTTPD server module will dereference a NULL pointer if asked to deliver baselined WebDAV resources which can lead to a DoS Denial Of Service CVE-2011-1752. The moddavsvn Apache HTTPD server module may in...

PT-2011-3477

Name of the Vulnerable Software and Affected Versions Apache Subversion versions 1.5.x through 1.6.16 Description The issue allows remote attackers to obtain sensitive information via a replay REPORT operation, due to improper permission enforcement for files that had been publicly readable in th...

CVE-2011-1921: Undefined Security Weakness

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to...

CVE-2011-1783: Undefined Security Weakness

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is enabled, allows remote attackers to cause a denial of service infinite loop and memory consumption in opportunistic circumstances by...

VulnCheck KEV: CVE-2011-1752

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

Mandriva Update for subversion MDVSA-2011:106 (subversion)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1752: NULL Pointer Dereference

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote Command

Exploit for php platform in category web applications WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction: This is a very special...

Subversion 'mod_dav_svn'拒绝服务和信息泄露漏洞

Bugtraq ID: 48091 CVE ID：CVE-2011-1752,CVE-2011-1783,CVE-2011-1921 Subversion是一款自由/开源版本控制系统。 Subversion存在多个安全漏洞，允许攻击者进行拒绝服务攻击或泄露敏感信息。 -处理基线资源请求时moddavsvn模块存在空指针引用错误，攻击者可以提交恶意请求可导致服务崩溃。 此漏洞影响1.6.16和之前版本。 -处理部分基于路径的访问控制规则时moddavsvn模块存在错误，可触发死循环并消耗大量内存，造成拒绝服务攻击。 此漏洞影响1.5.0到1.6.16之间的版本。...

WebSVN 2.3.2 - Unproper Metacharacters Escaping exec() Remote Command Injection

WebSVN 2.3.2 - Unproper Metacharacters Escaping exec Remote Command Injection WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction:...

WebSVN 2.3.2 - Unproper Metacharacters Escaping 'exec()' Remote Command Injection

WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction: This is a very special vulnerabilty, given the incredibly high number of...

WebSVN 2.3.2 Command Injection

WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction: This is a very special vulnerabilty, given the incredibly high number of...

WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote Commands Injection Vulnerability

WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction: This is a very special vulnerabilty, given the incredibly high number of...

FreeBSD : Subversion -- multiple vulnerabilities (e27a1af3-8d21-11e0-a45d-001e8c75030d)

Subversion team reports : Subversion's moddavsvn Apache HTTPD server module will dereference a NULL pointer if asked to deliver baselined WebDAV resources. This can lead to a DoS. An exploit has been tested, and tools or users have been observed triggering this problem in the wild. Subversion's...

[SECURITY] [DSA 2251-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2251-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 02, 2011 http://www.debian.org/security/faq -...

CVE-2011-1752

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

DSA-2251-1 subversion - several

Bulletin has no description...

[SECURITY] [DSA 2251-1] subversion security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2251-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 02, 2011 http://www.debian.org/security/faq -...