Apache

Subversion

47 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2011-1921

  • EPSS 4.42%
  • Veröffentlicht 06.06.2011 19:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly reada...

4.3

CVE-2011-1783

  • EPSS 6.7%
  • Veröffentlicht 06.06.2011 19:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memor...

5

CVE-2011-1752

  • EPSS 8.08%
  • Veröffentlicht 06.06.2011 19:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as e...

4.3

CVE-2011-0715

  • EPSS 11.09%
  • Veröffentlicht 11.03.2011 22:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.

3.5

CVE-2010-4644

Exploit
  • EPSS 1.27%
  • Veröffentlicht 07.01.2011 19:00:20
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.

6.8

CVE-2010-4539

Exploit
  • EPSS 0.98%
  • Veröffentlicht 07.01.2011 19:00:19
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vecto...

6

CVE-2010-3315

  • EPSS 0.49%
  • Veröffentlicht 04.10.2010 21:00:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, whi...