Show filters
18 Total Results
Displaying 11-18 of 18
Sort by:
Attacker Value
Unknown
CVE-2013-1968
Disclosure Date: July 31, 2013 (last updated October 05, 2023)
Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.
0
Attacker Value
Unknown
CVE-2013-2112
Disclosure Date: July 31, 2013 (last updated October 05, 2023)
The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection.
0
Attacker Value
Unknown
CVE-2013-2088
Disclosure Date: July 31, 2013 (last updated October 05, 2023)
contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.
0
Attacker Value
Unknown
CVE-2013-1849
Disclosure Date: May 02, 2013 (last updated October 05, 2023)
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.
0
Attacker Value
Unknown
CVE-2013-1845
Disclosure Date: May 02, 2013 (last updated October 05, 2023)
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a large number of properties for a file or directory.
0
Attacker Value
Unknown
CVE-2013-1846
Disclosure Date: May 02, 2013 (last updated October 05, 2023)
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
0
Attacker Value
Unknown
CVE-2013-1847
Disclosure Date: May 02, 2013 (last updated October 05, 2023)
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
0
Attacker Value
Unknown
CVE-2011-1921
Disclosure Date: June 06, 2011 (last updated October 04, 2023)
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
0
