Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

apache subversion 1.6.3 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2010-3315

authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x prior to 1.5.8 and 1.6.x prior to 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authentic...
Apache Subversion 1.6.10Apache Subversion 1.6.2Apache Subversion 1.6.5Apache Subversion 1.6.3Apache Subversion 1.6.8Apache Subversion 1.6.0Apache Subversion 1.6.7Apache Subversion 1.6.12Apache Subversion 1.6.1Apache Subversion 1.6.4Apache Subversion 1.6.11Apache Subversion 1.6.6Apache Subversion 1.6.9Apache Subversion 1.5.5Apache Subversion 1.5.3Apache Subversion 1.5.7Apache Subversion 1.5.2Apache Subversion 1.5.4Apache Subversion 1.5.1Apache Subversion 1.5.6Apache Subversion 1.5.0
NA

CVE-2013-2088

contrib/hook-scripts/svn-keyword-check.pl in Subversion prior to 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.
Apache Subversion 1.6.10Apache Subversion 1.6.19Apache Subversion 1.6.20Apache Subversion 1.6.2Apache Subversion 1.6.18Apache Subversion 1.6.16Apache Subversion 1.6.5Apache Subversion 1.6.3Apache Subversion 1.6.8Apache Subversion 1.6.13Apache Subversion 1.6.0Apache Subversion 1.6.7Apache Subversion 1.6.12Apache Subversion 1.6.1Apache Subversion 1.6.4Apache Subversion 1.6.15Apache Subversion 1.6.11Apache SubversionApache Subversion 1.6.14Apache Subversion 1.6.17Collabnet Subversion 1.6.17Apache Subversion 1.6.6
NA

CVE-2011-1921

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x prior to 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allow...
Apache Subversion 1.5.5Apache Subversion 1.5.3Apache Subversion 1.5.7Apache Subversion 1.5.8Apache Subversion 1.5.2Apache Subversion 1.5.4Apache Subversion 1.5.1Apache Subversion 1.5.6Apache Subversion 1.5.0Apache Subversion 1.6.10Apache Subversion 1.6.2Apache Subversion 1.6.16Apache Subversion 1.6.5Apache Subversion 1.6.3Apache Subversion 1.6.8Apache Subversion 1.6.13Apache Subversion 1.6.0Apache Subversion 1.6.7Apache Subversion 1.6.12Apache Subversion 1.6.1Apache Subversion 1.6.4Apache Subversion 1.6.15
NA

CVE-2013-1849

The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x up to and including 1.6.20 and 1.7.0 up to and including 1.7.8 allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.
Apache Subversion 1.6.10Apache Subversion 1.6.19Apache Subversion 1.6.20Apache Subversion 1.6.2Apache Subversion 1.6.18Apache Subversion 1.6.16Apache Subversion 1.6.5Apache Subversion 1.6.3Apache Subversion 1.6.8Apache Subversion 1.6.13Apache Subversion 1.6.0Apache Subversion 1.6.7Apache Subversion 1.6.12Apache Subversion 1.6.1Apache Subversion 1.6.4Apache Subversion 1.6.15Apache Subversion 1.6.11Apache Subversion 1.6.14Apache Subversion 1.6.17Apache Subversion 1.6.6Apache Subversion 1.6.9Apache Subversion 1.7.3
NA

CVE-2013-4277

Svnserve in Apache Subversion 1.4.0 up to and including 1.7.12 and 1.8.0 up to and including 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option.
Apache Subversion 1.6.10Apache Subversion 1.6.19Apache Subversion 1.4.5Apache Subversion 1.7.3Apache Subversion 1.6.20Apache Subversion 1.8.0Apache Subversion 1.4.2Apache Subversion 1.6.2Apache Subversion 1.7.1Apache Subversion 1.7.11Apache Subversion 1.6.18Apache Subversion 1.6.16Apache Subversion 1.5.5Apache Subversion 1.7.4Apache Subversion 1.6.21Apache Subversion 1.6.5Apache Subversion 1.7.6Apache Subversion 1.5.3Apache Subversion 1.4.0Apache Subversion 1.8.1Apache Subversion 1.4.4Apache Subversion 1.5.7
NA

CVE-2013-4505

The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 up to and including 1.7.13 and 1.8.0 up to and including 1.8.4 allows remote malicious users to bypass intended access restrictions and possibly cause a denial of service (resource consumption) via a relativ...
Apache Mod Dontdothat -Apache Subversion 1.4.0Apache Subversion 1.4.1Apache Subversion 1.4.2Apache Subversion 1.4.3Apache Subversion 1.4.4Apache Subversion 1.4.5Apache Subversion 1.4.6Apache Subversion 1.5.0Apache Subversion 1.5.1Apache Subversion 1.5.2Apache Subversion 1.5.3Apache Subversion 1.5.4Apache Subversion 1.5.5Apache Subversion 1.5.6Apache Subversion 1.5.7Apache Subversion 1.5.8Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4
NA

CVE-2014-3522

The Serf RA layer in Apache Subversion 1.4.0 up to and including 1.7.x prior to 1.7.18 and 1.8.x prior to 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle malicious users to spoof se...
Apache Subversion 1.6.10Apache Subversion 1.6.19Apache Subversion 1.8.2Apache Subversion 1.4.5Apache Subversion 1.7.3Apache Subversion 1.6.20Apache Subversion 1.7.17Apache Subversion 1.8.0Apache Subversion 1.4.2Apache Subversion 1.6.2Apache Subversion 1.7.1Apache Subversion 1.7.11Apache Subversion 1.7.16Apache Subversion 1.6.18Apache Subversion 1.6.16Apache Subversion 1.5.5Apache Subversion 1.7.4Apache Subversion 1.6.21Apache Subversion 1.6.5Apache Subversion 1.7.6Apache Subversion 1.5.3Apache Subversion 1.4.0
NA

CVE-2011-0715

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion prior to 1.6.16, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
Apache Subversion 1.2.0Apache Subversion 1.0.4Apache Subversion 1.6.10Apache Subversion 0.22.0Apache Subversion 1.0.8Apache Subversion 1.4.5Apache Subversion 1.0.2Apache Subversion 1.1.2Apache Subversion 0.26.0Apache Subversion 0.10.1Apache Subversion 0.15Apache Subversion 1.0.9Apache Subversion 1.4.2Apache Subversion 0.37.0Apache Subversion M2Apache Subversion 1.6.2Apache Subversion 0.9Apache Subversion 0.7Apache Subversion 0.19.0Apache Subversion 0.22.2Apache Subversion 0.12.0Apache Subversion 1.5.5
NA

CVE-2010-4539

The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion prior to 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking ...
Apache Subversion 1.2.0Apache Subversion 1.0.4Apache Subversion 1.6.10Apache Subversion 0.22.0Apache Subversion 1.0.8Apache Subversion 1.4.5Apache Subversion 1.0.2Apache Subversion 1.1.2Apache Subversion 0.26.0Apache Subversion 0.10.1Apache Subversion 0.15Apache Subversion 1.0.9Apache Subversion 1.4.2Apache Subversion 0.37.0Apache Subversion M2Apache Subversion 1.6.2Apache Subversion 0.9Apache Subversion 0.7Apache Subversion 0.19.0Apache Subversion 0.22.2Apache Subversion 0.12.0Apache Subversion 1.5.5
NA

CVE-2010-4644

Multiple memory leaks in rev_hunt.c in Apache Subversion prior to 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Apache Subversion 1.2.0Apache Subversion 1.0.4Apache Subversion 1.6.10Apache Subversion 0.22.0Apache Subversion 1.0.8Apache Subversion 1.4.5Apache Subversion 1.0.2Apache Subversion 1.1.2Apache Subversion 0.26.0Apache Subversion 0.10.1Apache Subversion 0.15Apache Subversion 1.0.9Apache Subversion 1.4.2Apache Subversion 0.37.0Apache Subversion M2Apache Subversion 1.6.2Apache Subversion 0.9Apache Subversion 0.7Apache Subversion 0.19.0Apache Subversion 0.22.2Apache Subversion 0.12.0Apache Subversion 1.5.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20017administrator privilegesCVE-2024-36401CVE-2024-8521CVE-2024-8247event management systemCVE-2024-45098aspera faspexremote attackersXSSmindsdbangeljudesuarezCVE-2024-45157
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook