Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2448
HistoryJun 14, 2007 - 12:00 a.m.

CVE-2007-2448

2007-06-1400:00:00
ubuntu.com
ubuntu.com
6

2.1 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.5%

Subversion 1.4.3 and earlier does not properly implement the “partial
access” privilege for users who have access to changed paths but not copied
paths, which allows remote authenticated users to obtain sensitive
information (revision properties) via svn (1) propget, (2) proplist, or (3)
propedit.

Notes

Author Note
kees minor uncommonly used ACL issue
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsubversion< 1.3.1-3ubuntu1.3UNKNOWN

2.1 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.5%