Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache subversion 1.6.6 vulnerabilities and exploits

(subscribe to this query)

7.1
CVSSv2
CVE-2013-2088
contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename....
Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.6.13Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.17Apache Subversion 1.6.18Apache Subversion 1.6.19Apache Subversion 1.6.20Apache SubversionCollabnet Subversion 1.6.17Opensuse Opensuse 11.4
6
CVSSv2
CVE-2010-3315
authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote...
Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.5.0Apache Subversion 1.5.1Apache Subversion 1.5.2Apache Subversion 1.5.3Apache Subversion 1.5.4Apache Subversion 1.5.5Apache Subversion 1.5.6Apache Subversion 1.5.7
4.3
CVSSv2
CVE-2013-1849
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL....
Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.6.13Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.17Apache Subversion 1.6.18Apache Subversion 1.6.19Apache Subversion 1.6.20Apache Subversion 1.7.0Apache Subversion 1.7.1Apache Subversion 1.7.2Apache Subversion 1.7.3Apache Subversion 1.7.4Apache Subversion 1.7.5Apache Subversion 1.7.6Apache Subversion 1.7.7Apache Subversion 1.7.8
5
CVSSv2
CVE-2013-1847
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist....
Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.6.13Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.17Apache Subversion 1.6.18Apache Subversion 1.6.19Apache Subversion 1.6.20Apache Subversion 1.7.0Apache Subversion 1.7.1Apache Subversion 1.7.2Apache Subversion 1.7.3Apache Subversion 1.7.4Apache Subversion 1.7.5Apache Subversion 1.7.6Apache Subversion 1.7.7Apache Subversion 1.7.8
4
CVSSv2
CVE-2013-1846
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL....
Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.6.13Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.17Apache Subversion 1.6.18Apache Subversion 1.6.19Apache SubversionApache Subversion 1.7.0Apache Subversion 1.7.1Apache Subversion 1.7.2Apache Subversion 1.7.3Apache Subversion 1.7.4Apache Subversion 1.7.5Apache Subversion 1.7.6Apache Subversion 1.7.7Opensuse Opensuse 12.1Opensuse Opensuse 12.2Opensuse Opensuse 12.3
2.1
CVSSv2
CVE-2013-1845
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a large number of properties for a file or directory....
Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.6.13Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.17Apache Subversion 1.6.18Apache Subversion 1.6.19Apache Subversion 1.6.20Apache Subversion 1.7.0Apache Subversion 1.7.1Apache Subversion 1.7.2Apache Subversion 1.7.3Apache Subversion 1.7.4Apache Subversion 1.7.5Apache Subversion 1.7.6Apache Subversion 1.7.7Apache Subversion 1.7.8Opensuse Opensuse 12.1Opensuse Opensuse 12.2Opensuse Opensuse 12.3
7.8
CVSSv2
CVE-2013-2112
The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection....
Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.6.13Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.17Apache Subversion 1.6.18Apache Subversion 1.6.19Apache Subversion 1.6.20Apache SubversionCollabnet Subversion 1.6.17Apache Subversion 1.7.0Apache Subversion 1.7.1Apache Subversion 1.7.2Apache Subversion 1.7.3Apache Subversion 1.7.4Apache Subversion 1.7.5Apache Subversion 1.7.6Apache Subversion 1.7.7Apache Subversion 1.7.8Apache Subversion 1.7.9Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Opensuse Opensuse 11.4
2.6
CVSSv2
CVE-2013-4505
The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service (resource consumption) via a relative URL in a REPORT request....
Apache Mod Dontdothat -Apache Subversion 1.4.0Apache Subversion 1.4.1Apache Subversion 1.4.2Apache Subversion 1.4.3Apache Subversion 1.4.4Apache Subversion 1.4.5Apache Subversion 1.4.6Apache Subversion 1.5.0Apache Subversion 1.5.1Apache Subversion 1.5.2Apache Subversion 1.5.3Apache Subversion 1.5.4Apache Subversion 1.5.5Apache Subversion 1.5.6Apache Subversion 1.5.7Apache Subversion 1.5.8Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.6.13Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.17Apache Subversion 1.6.18Apache Subversion 1.6.19Apache Subversion 1.6.20Apache Subversion 1.6.21Apache Subversion 1.6.23Apache Subversion 1.7.0Apache Subversion 1.7.1Apache Subversion 1.7.2Apache Subversion 1.7.3Apache Subversion 1.7.4Apache Subversion 1.7.5Apache Subversion 1.7.6Apache Subversion 1.7.7Apache Subversion 1.7.8Apache Subversion 1.7.9Apache Subversion 1.7.10Apache Subversion 1.7.11Apache Subversion 1.7.12Apache Subversion 1.8.1
4.3
CVSSv2
CVE-2011-1921
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows...
Apache Subversion 1.5.0Apache Subversion 1.5.1Apache Subversion 1.5.2Apache Subversion 1.5.3Apache Subversion 1.5.4Apache Subversion 1.5.5Apache Subversion 1.5.6Apache Subversion 1.5.7Apache Subversion 1.5.8Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.6.13Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.16
5.5
CVSSv2
CVE-2013-1968
Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name....
Apache Subversion 1.6.0Apache Subversion 1.6.1Apache Subversion 1.6.2Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.5Apache Subversion 1.6.6Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.9Apache Subversion 1.6.10Apache Subversion 1.6.11Apache Subversion 1.6.12Apache Subversion 1.6.13Apache Subversion 1.6.14Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.17Apache Subversion 1.6.18Apache Subversion 1.6.19Apache Subversion 1.6.20Apache SubversionCollabnet Subversion 1.6.17Apache Subversion 1.7.0Apache Subversion 1.7.1Apache Subversion 1.7.2Apache Subversion 1.7.3Apache Subversion 1.7.4Apache Subversion 1.7.5Apache Subversion 1.7.6Apache Subversion 1.7.7Apache Subversion 1.7.8Apache Subversion 1.7.9Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Opensuse Opensuse 11.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
XXECVE-2021-21973mass assignmentCVE-2021-1396CVE-2018-19518CVE-2020-28599deserializationCVE-2021-1230CVE-2021-26681