5

CVE-2004-0749

The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Subversion ≫ Subversion Version 1.0
Subversion ≫ Subversion Version 1.0.1
Subversion ≫ Subversion Version 1.0.2
Subversion ≫ Subversion Version 1.0.3
Subversion ≫ Subversion Version 1.0.4
Subversion ≫ Subversion Version 1.0.5
Subversion ≫ Subversion Version 1.0.6
Subversion ≫ Subversion Version 1.0.7
Subversion ≫ Subversion Version 1.1.0_rc1
Subversion ≫ Subversion Version 1.1.0_rc2
Subversion ≫ Subversion Version 1.1.0_rc3
Gentoo ≫ Linux Version 0.5
Gentoo ≫ Linux Version 0.7
Gentoo ≫ Linux Version 1.1a
Gentoo ≫ Linux Version 1.2
Gentoo ≫ Linux Version 1.4
Gentoo ≫ Linux Version 1.4 Update rc1
Gentoo ≫ Linux Version 1.4 Update rc2
Gentoo ≫ Linux Version 1.4 Update rc3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.46% 0.701
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://fedoranews.org/updates/FEDORA-2004-318.shtml
http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11243
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17472