2.1 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:S/C:P/I:N/A:N
subversion is vulnerable to information disclosure. The partial access
functionality is not properly implemented, allowing users who have access to change paths to obtain confidential confidential information via propget
, proplist
or propedit
.
osvdb.org/36070
secunia.com/advisories/43139
securitytracker.com/id?1018237
subversion.tigris.org/security/CVE-2007-2448-advisory.txt
www.securityfocus.com/bid/24463
www.ubuntu.com/usn/USN-1053-1
www.vupen.com/english/advisories/2007/2230
www.vupen.com/english/advisories/2011/0264
access.redhat.com/errata/RHEA-2011:0039
issues.rpath.com/browse/RPL-1896