PT-2013-5046 · Apache+1 · Apache Subversion+1
Ben Reser
·
Publicado
2013-09-16
·
Atualizado
2024-06-15
·
CVE-2013-4505
CVSS v2.0
2.6
Baixa
| Vetor | AV:N/AC:H/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Apache Subversion versions 1.4.0 through 1.7.13
Apache Subversion versions 1.8.0 through 1.8.4
Description
The issue allows remote attackers to bypass intended access restrictions and possibly cause a denial of service via a relative URL in a REPORT request. This is due to the
is this legal function in mod dontdothat.Recommendations
For Apache Subversion versions 1.4.0 through 1.7.13, consider updating to a version outside of this range to resolve the issue.
For Apache Subversion versions 1.8.0 through 1.8.4, consider updating to a version outside of this range to resolve the issue.
As a temporary workaround, consider restricting access to the
mod dontdothat module to minimize the risk of exploitation.Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Subversion
Suse