13 matches found
MiracleLinux 3 : subversion-1.4.2-4.1.1AXS3 (AXSA:2009-374:02)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-374:02 advisory. Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and...
SUSE CVE-2009-2411
Multiple integer overflows in the libsvndelta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to...
Debian DSA-1855-1 : subversion - heap overflow
Matt Lewis discovered that Subversion performs insufficient input validation of svndiff streams. Malicious servers could cause heap overflows in clients, and malicious clients with commit access could cause heap overflows in servers, possibly leading to arbitrary code execution in both cases...
Mandriva Security Advisory MDVSA-2009:199-1 (subversion)
The remote host is missing an update to subversion announced via advisory MDVSA-2009:199-1. OpenVAS Vulnerability Test $Id: mdksa20091991.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:199-1 subversion Authors: Thomas Reinke Copyright: Copyright c...
SVN < 1.5.6 / 1.6.0-1.6.3 Multiple Integer Overflows (deprecated)
Binary data 5140.prm...
subversion: multiple heap overflow issues
Multiple integer overflows in the libsvndelta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to...
USN-812-1: Subversion vulnerability
Matt Lewis discovered that Subversion did not properly sanitize its input when processing svndiff streams, leading to various integer and heap overflows. If a user or automated system processed crafted input, a remote attacker could cause a denial of service or potentially execute arbitrary code ...
DSA-1855-1 subversion - heap overflow
Bulletin has no description...
CVE-2009-2411
Multiple integer overflows in the libsvndelta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to...
DEBIAN-CVE-2009-2411
Multiple integer overflows in the libsvndelta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to...
CVE-2009-2411
Multiple integer overflows in the libsvndelta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to...
CVE-2009-2411
Multiple integer overflows in the libsvndelta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to...
CVE-2009-2411
CVE-2009-2411 affects Subversion libsvn_delta; multiple integer overflows lead to a heap-based buffer overflow via svndiff streams with large windows. Affects Subversion before 1.5.7 and 1.6.x before 1.6.4; remote authenticated users and servers could cause arbitrary code execution. Fix: upgrade ...