PT-2007-7456 · Apache · Subversion+1

Publicado 2007-04-10 · Atualizado 2024-06-15 · CVE-2013-4262

Positive Technologies (AI Summary)

CVSS v2.0

2.4

Baixa

Vetor base

AV:L/AC:H/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Subversion versions 1.8.0 through 1.8.2

Description The issue allows local users to gain privileges via a symlink attack on the pid file when using the --pidfile option and running in foreground mode. This is related to the svnwcsub.py and irkerbridge.py utilities.

Recommendations For Subversion versions 1.8.0 through 1.8.2, update to version 1.8.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the --pidfile option when running in foreground mode to minimize the risk of exploitation.

Correção

LPE

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2013-4262

OPENSUSE-SU-2024:10538-1

Produtos afetados

Apache Subversion

Subversion

Referências · 46

• https://suse.com/security/cve/CVE-2015-3184 · Nota
• https://suse.com/security/cve/CVE-2013-1846 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4262 · Nota
• https://suse.com/security/cve/CVE-2016-2168 · Nota
• https://suse.com/security/cve/CVE-2015-3187 · Nota
• https://suse.com/security/cve/CVE-2015-0251 · Nota
• http://subversion.apache.org/security/CVE-2013-4262-advisory.txt · Nota
• https://suse.com/security/cve/CVE-2010-4644 · Nota
• https://suse.com/security/cve/CVE-2016-8734 · Nota
• https://suse.com/security/cve/CVE-2013-1968 · Nota
• https://suse.com/security/cve/CVE-2011-1783 · Nota
• https://suse.com/security/cve/CVE-2014-0032 · Nota
• https://osv.dev/vulnerability/CVE-2013-4262 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2009-2411 · Nota
• https://suse.com/security/cve/CVE-2015-5259 · Nota