PT-2004-1828 · Apache · Subversion

Published 2004-11-19 · Updated 2017-07-11 · CVE-2004-0749

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Subversion versions 1.0.7 and earlier

Description The issue allows remote attackers to gain sensitive information due to improper access restriction to metadata on unreadable paths. This can be achieved through various Subversion commands, including svn log -v, svn propget, and svn blame, among others that follow renames.

Recommendations For Subversion versions 1.0.7 and earlier, update to a version later than 1.0.7 to resolve the issue.

Fix

Related Identifiers

CVE-2004-0749

Affected Products

Subversion

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2004-0749 · Security Note
• https://osv.dev/vulnerability/CVE-2004-0749 · Vendor Advisory
• http://fedoranews.org/updates/FEDORA-2004-318.shtml · Vendor Advisory
• http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0749 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200409-35.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0749 · Vendor Advisory
• http://securityfocus.com/bid/11243 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17472 · Note