PT-2011-3477 · Apache+1 · Apache Subversion+1

Kamesh Jayachandran · Publicado 2011-06-06 · Atualizado 2024-06-15 · CVE-2011-1921

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Subversion versions 1.5.x through 1.6.16

Description The issue allows remote attackers to obtain sensitive information via a replay REPORT operation, due to improper permission enforcement for files that had been publicly readable in the past when the SVNPathAuthz short circuit option is disabled.

Recommendations For Apache Subversion versions 1.5.x through 1.6.16, update to version 1.6.17 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-1921

DSA-2251-1

OPENSUSE-SU-2024:10538-1

RHSA-2011:0862

RHSA-2011_0862

Produtos afetados

Apache Subversion

Red Hat

Referências · 70

• http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061913.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-3184 · Nota
• https://suse.com/security/cve/CVE-2013-1846 · Nota
• http://subversion.apache.org/security/CVE-2011-1921-advisory.txt · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-2168 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1783 · Nota
• https://suse.com/security/cve/CVE-2015-3187 · Nota
• https://suse.com/security/cve/CVE-2015-0251 · Nota
• http://secunia.com/advisories/44849 · Nota
• https://suse.com/security/cve/CVE-2010-4644 · Nota
• https://suse.com/security/cve/CVE-2016-8734 · Nota
• http://support.apple.com/kb/HT5130 · Nota
• https://suse.com/security/cve/CVE-2013-1968 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1921 · Nota
• https://linux.oracle.com/errata/ELSA-2011-0862.html · Aviso do Fabricante