Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-0749
HistoryDec 23, 2004 - 12:00 a.m.

CVE-2004-0749

2004-12-2300:00:00
ubuntu.com
ubuntu.com
10

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.029 Low

EPSS

Percentile

90.8%

The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly
restrict access to all metadata on unreadable paths, which could allow
remote attackers to gain sensitive information via (1) svn log -v, (2) svn
propget, or (3) svn blame, and other commands that follow renames.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsubversion< 1.3.1-3ubuntu1UNKNOWN
ubuntu6.10noarchsubversion< 1.3.1-3ubuntu1UNKNOWN
ubuntu7.04noarchsubversion< 1.3.1-3ubuntu1UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.029 Low

EPSS

Percentile

90.8%