CPANSA-Alien-SVN-2015-0251-subversion: Alien-SVN vulnerability
Publisher | giterlizzi | Document category | csaf_security_advisory |
---|---|---|---|
Initial release date | 2015-04-08T00:00:00 | Engine | CSAF Perl Toolkit 0.25 |
Current release date | 2015-04-08T00:00:00 | Build Date | |
Current version | 1 | Status | final |
CVSS v3.1 Base Score | Severity | ||
Original language | Language | en | |
Also referred to |
Vulnerability Description
The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
Vulnerabilities
CVE-2015-0251
Vulnerability DescriptionThe mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
Weakness | CWE-345 : Insufficient Verification of Data Authenticity |
---|
Product status
Known affected
Product | Score | ||||||||
---|---|---|---|---|---|---|---|---|---|
Alien-SVN equal =1.8.11.0 |
|
giterlizzi
Namespace: https://github.com/giterlizzi/
gdt@cpan.org
References
- CPANSA-Alien-SVN-2015-0251-subversion JSON self
https://raw.githubusercontent.com/giterlizzi/perl-CPANSA-CSAF/develop/csaf/white/2015/cpansa-alien-svn-2015-0251-subversion.json - http://subversion.apache.org/security/CVE-2015-0251-advisory.txt external
http://subversion.apache.org/security/CVE-2015-0251-advisory.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2015:192 external
http://www.mandriva.com/security/advisories?name=MDVSA-2015:192 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html external
http://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html - http://rhn.redhat.com/errata/RHSA-2015-1633.html external
http://rhn.redhat.com/errata/RHSA-2015-1633.html - https://support.apple.com/HT205217 external
https://support.apple.com/HT205217 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html external
http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html external
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - http://www.securityfocus.com/bid/74259 external
http://www.securityfocus.com/bid/74259 - http://rhn.redhat.com/errata/RHSA-2015-1742.html external
http://rhn.redhat.com/errata/RHSA-2015-1742.html - http://www.ubuntu.com/usn/USN-2721-1 external
http://www.ubuntu.com/usn/USN-2721-1 - http://seclists.org/fulldisclosure/2015/Jun/32 external
http://seclists.org/fulldisclosure/2015/Jun/32 - http://www.debian.org/security/2015/dsa-3231 external
http://www.debian.org/security/2015/dsa-3231 - https://security.gentoo.org/glsa/201610-05 external
https://security.gentoo.org/glsa/201610-05 - http://www.securitytracker.com/id/1033214 external
http://www.securitytracker.com/id/1033214 - CVE-2015-0251 (NVD) external
https://nvd.nist.gov/vuln/detail/CVE-2015-0251
Revision history
Version | Date of the revision | Summary of the revision |
---|---|---|
1 | Wed Apr 8 00:00:00 2015 | First release |
Sharing rules
TLP:WHITE
For the TLP version see: https://www.first.org/tlp/