CVE-2015-0251

MEDIUM · 4.0 CVSS Gepubliceerd: 08-04-2015 CWE-345

Beschrijving

The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.

Vendors

Apache Opensuse Redhat Oracle Apple

Affected products

Subversion Opensuse Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server Enterprise Linux Server Eus Enterprise Linux Workstation Solaris Xcode

References

lists.apple.com
lists.opensuse.org
rhn.redhat.com
rhn.redhat.com
seclists.org
subversion.apache.org
www.debian.org
www.mandriva.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
www.ubuntu.com
security.gentoo.org
support.apple.com