PT-2011-1598 · Apache+1 · Apache Subversion+1

Jan Lieskovsky · Publicado 2011-01-07 · Atualizado 2024-06-15 · CVE-2010-4539

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apache Subversion versions prior to 1.6.15

Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash due to a NULL pointer dereference. This is achieved by triggering the walking of SVNParentPath collections.

Recommendations For versions prior to 1.6.15, update to version 1.6.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the mod dav svn module to minimize the risk of exploitation.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-4539

OPENSUSE-SU-2024:10538-1

RHSA-2011:0257

RHSA-2011:0258

RHSA-2011_0257

RHSA-2011_0258

Produtos afetados

Apache Subversion

Red Hat

Referências · 80

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=667407 · Exploit
• 🔥 http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/[e-mail]%3E · Exploit
• https://suse.com/security/cve/CVE-2015-3184 · Nota
• https://suse.com/security/cve/CVE-2013-1846 · Nota
• http://openwall.com/lists/oss-security/2011/01/05/4 · Correção
• https://osv.dev/vulnerability/CVE-2010-4539 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2011/01/04/8 · Correção
• http://secunia.com/advisories/42780 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-8734 · Nota
• https://suse.com/security/cve/CVE-2013-1968 · Nota
• http://svn.apache.org/viewvc?view=revision&revision=1033166 · Correção
• https://access.redhat.com/security/cve/CVE-2010-4539 · Nota
• https://suse.com/security/cve/CVE-2015-5259 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html · Aviso do Fabricante
• http://securityfocus.com/bid/45655 · Nota