PT-2014-3440 · Apache+5 · Apache Subversion+5

Publicado 2014-02-06 · Atualizado 2024-06-15 · CVE-2014-0032

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Subversion versions prior to 1.7.15 Apache Subversion versions 1.8.x prior to 1.8.6

Description The issue allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET. This can be demonstrated by the command "svn ls http://svn.example.com" when the SVNListParentPath is enabled.

Recommendations For Apache Subversion versions prior to 1.7.15, update to version 1.7.15 or later. For Apache Subversion versions 1.8.x prior to 1.8.6, update to version 1.8.6 or later.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2015-1708

CESA-2014_0255

CVE-2014-0032

DLA-207-1

MGASA-2014-0104

MGASA-2014-0105

OPENSUSE-SU-2024:10538-1

RHSA-2014:0255

RHSA-2014_0255

SUSE-SU-2014_0540-1

SUSE-SU-2015:0709-1

USN-2316-1

Produtos afetados

Alt Linux

Apache Subversion

Centos

Red Hat

Suse

Ubuntu

Referências · 116

• 🔥 http://mail-archives.apache.org/mod_mbox/subversion-dev/201401.mbox/[e-mail]%3E · Exploit
• https://suse.com/security/cve/CVE-2015-3184 · Nota
• https://suse.com/security/cve/CVE-2013-1846 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2112 · Nota
• https://bdu.fstec.ru/vul/2015-00404 · Nota de Segurança
• https://lists.suse.com/pipermail/sle-security-updates/2014-April/000795.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0248 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-8734 · Nota
• https://suse.com/security/cve/CVE-2013-1968 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0032 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-5259 · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1849 · Nota de Segurança
• http://download.suse.com/patch/finder/?keywords=1c38b525e188b7b593c67f0e966d5e7e · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0032 · Nota de Segurança