PT-2007-3773 · Apache · Subversion+1

Published 2007-06-14 · Updated 2024-06-15 · CVE-2007-2448

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:N/AC:H/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Subversion versions 1.4.3 and earlier

Description The issue allows remote authenticated users to obtain sensitive information, specifically revision properties, due to improper implementation of the "partial access" privilege. This can be achieved via svn commands such as propget, proplist, or propedit.

Recommendations For Subversion versions 1.4.3 and earlier, update to a version that properly implements the "partial access" privilege to prevent unauthorized access to sensitive information.

Fix

Related Identifiers

CVE-2007-2448

OPENSUSE-SU-2024:11412-1

Affected Products

Apache Subversion

Subversion

References · 20

• https://osv.dev/vulnerability/openSUSE-SU-2024:11412-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-2448 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2448 · Security Note
• http://ubuntu.com/usn/USN-1053-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-2448 · Vendor Advisory
• http://securityfocus.com/bid/24463 · Patch
• http://securitytracker.com/id?1018237 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-2448 · Vendor Advisory
• https://suse.com/security/cve/CVE-2007-2448 · Note
• https://suse.com/security/cve/CVE-2018-11803 · Note
• http://vupen.com/english/advisories/2011/0264 · Note
• https://issues.rpath.com/browse/RPL-1896 · Note
• https://suse.com/security/cve/CVE-2017-9800 · Note
• https://suse.com/security/cve/CVE-2019-0203 · Note
• http://subversion.tigris.org/security/CVE-2007-2448-advisory.txt · Note