PT-2004-1828 · Apache · Subversion

Publicado 2004-11-19 · Atualizado 2017-07-11 · CVE-2004-0749

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Subversion versions 1.0.7 and earlier

Description The issue allows remote attackers to gain sensitive information due to improper access restriction to metadata on unreadable paths. This can be achieved through various Subversion commands, including svn log -v, svn propget, and svn blame, among others that follow renames.

Recommendations For Subversion versions 1.0.7 and earlier, update to a version later than 1.0.7 to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0749

Produtos afetados

Subversion

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2004-0749 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2004-0749 · Aviso do Fabricante
• http://fedoranews.org/updates/FEDORA-2004-318.shtml · Aviso do Fabricante
• http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2004-0749 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200409-35.xml · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0749 · Aviso do Fabricante
• http://securityfocus.com/bid/11243 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17472 · Nota