Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache subversion 1.6.6 vulnerabilities and exploits

(subscribe to this query)

6
CVSSv2
CVE-2010-3315
authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote...
Apache Subversion 1.6.5Apache Subversion 1.6.4Apache Subversion 1.6.12Apache Subversion 1.6.11Apache Subversion 1.6.3Apache Subversion 1.6.2Apache Subversion 1.6.7Apache Subversion 1.6.6Apache Subversion 1.6.10Apache Subversion 1.6.9Apache Subversion 1.6.8Apache Subversion 1.6.1Apache Subversion 1.6.0Apache Subversion 1.5.6Apache Subversion 1.5.5Apache Subversion 1.5.4Apache Subversion 1.5.3Apache Subversion 1.5.7Apache Subversion 1.5.0Apache Subversion 1.5.2Apache Subversion 1.5.1
7.1
CVSSv2
CVE-2013-2088
contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename....
Apache Subversion 1.6.3Apache Subversion 1.6.2Apache Subversion 1.6.10Apache Subversion 1.6.9Apache Subversion 1.6.20Apache Subversion 1.6.19Apache Subversion 1.6.6Apache Subversion 1.6.5Apache Subversion 1.6.13Apache Subversion 1.6.12Apache Subversion 1.6.18Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.8Apache Subversion 1.6.0Apache Subversion 1.6.7Apache Subversion 1.6.1Apache Subversion 1.6.4Apache Subversion 1.6.11Apache SubversionApache Subversion 1.6.14Apache Subversion 1.6.17Collabnet Subversion 1.6.17Opensuse Opensuse 11.4
5
CVSSv2
CVE-2013-1847
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist....
Apache Subversion 1.6.15Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.11Apache Subversion 1.6.19Apache Subversion 1.6.20Apache Subversion 1.6.0Apache Subversion 1.6.7Apache Subversion 1.6.8Apache Subversion 1.6.17Apache Subversion 1.6.2Apache Subversion 1.6.1Apache Subversion 1.6.10Apache Subversion 1.6.18Apache Subversion 1.6.16Apache Subversion 1.6.5Apache Subversion 1.6.13Apache Subversion 1.6.12Apache Subversion 1.6.14Apache Subversion 1.6.6Apache Subversion 1.6.9Apache Subversion 1.7.5Apache Subversion 1.7.1Apache Subversion 1.7.2Apache Subversion 1.7.0Apache Subversion 1.7.7Apache Subversion 1.7.8Apache Subversion 1.7.6Apache Subversion 1.7.3Apache Subversion 1.7.4
4.3
CVSSv2
CVE-2013-1849
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL....
Apache Subversion 1.6.0Apache Subversion 1.6.7Apache Subversion 1.6.13Apache Subversion 1.6.8Apache Subversion 1.6.17Apache Subversion 1.6.2Apache Subversion 1.6.1Apache Subversion 1.6.10Apache Subversion 1.6.9Apache Subversion 1.6.15Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.6.19Apache Subversion 1.6.20Apache Subversion 1.6.18Apache Subversion 1.6.16Apache Subversion 1.6.5Apache Subversion 1.6.12Apache Subversion 1.6.11Apache Subversion 1.6.14Apache Subversion 1.6.6Apache Subversion 1.7.1Apache Subversion 1.7.2Apache Subversion 1.7.0Apache Subversion 1.7.7Apache Subversion 1.7.8Apache Subversion 1.7.5Apache Subversion 1.7.6Apache Subversion 1.7.3Apache Subversion 1.7.4
4
CVSSv2
CVE-2013-1846
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL....
Apache SubversionApache Subversion 1.6.12Apache Subversion 1.6.11Apache Subversion 1.6.4Apache Subversion 1.6.3Apache Subversion 1.6.14Apache Subversion 1.6.13Apache Subversion 1.6.6Apache Subversion 1.6.5Apache Subversion 1.6.17Apache Subversion 1.6.16Apache Subversion 1.6.15Apache Subversion 1.6.10Apache Subversion 1.6.19Apache Subversion 1.6.2Apache Subversion 1.6.18Apache Subversion 1.6.8Apache Subversion 1.6.0Apache Subversion 1.6.7Apache Subversion 1.6.1Apache Subversion 1.6.9Apache Subversion 1.7.2Apache Subversion 1.7.3Apache Subversion 1.7.0Apache Subversion 1.7.1Apache Subversion 1.7.7Apache Subversion 1.7.4Apache Subversion 1.7.5Apache Subversion 1.7.6Opensuse Opensuse 12.2Opensuse Opensuse 12.1Opensuse Opensuse 12.3
2.1
CVSSv2
CVE-2013-1845
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a large number of properties for a file or directory....
Apache Subversion 1.6.19Apache Subversion 1.6.12Apache Subversion 1.6.11Apache Subversion 1.6.4Apache Subversion 1.6.3Apache Subversion 1.6.16Apache Subversion 1.6.15Apache Subversion 1.6.8Apache Subversion 1.6.7Apache Subversion 1.6.0Apache Subversion 1.6.20Apache Subversion 1.6.14Apache Subversion 1.6.10Apache Subversion 1.6.2Apache Subversion 1.6.18Apache Subversion 1.6.5Apache Subversion 1.6.13Apache Subversion 1.6.1Apache Subversion 1.6.17Apache Subversion 1.6.6Apache Subversion 1.6.9Apache Subversion 1.7.2Apache Subversion 1.7.3Apache Subversion 1.7.6Apache Subversion 1.7.7Apache Subversion 1.7.0Apache Subversion 1.7.1Apache Subversion 1.7.8Apache Subversion 1.7.4Apache Subversion 1.7.5Opensuse Opensuse 12.1Opensuse Opensuse 12.3Opensuse Opensuse 12.2
4.3
CVSSv2
CVE-2011-1921
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows...
Apache Subversion 1.5.0Apache Subversion 1.5.3Apache Subversion 1.5.6Apache Subversion 1.5.5Apache Subversion 1.5.4Apache Subversion 1.5.1Apache Subversion 1.5.8Apache Subversion 1.5.7Apache Subversion 1.5.2Apache Subversion 1.6.15Apache Subversion 1.6.3Apache Subversion 1.6.2Apache Subversion 1.6.11Apache Subversion 1.6.10Apache Subversion 1.6.14Apache Subversion 1.6.1Apache Subversion 1.6.0Apache Subversion 1.6.9Apache Subversion 1.6.13Apache Subversion 1.6.16Apache Subversion 1.6.5Apache Subversion 1.6.8Apache Subversion 1.6.7Apache Subversion 1.6.12Apache Subversion 1.6.4Apache Subversion 1.6.6
7.8
CVSSv2
CVE-2013-2112
The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection....
Apache Subversion 1.6.15Apache Subversion 1.6.3Apache Subversion 1.6.2Apache Subversion 1.6.11Apache Subversion 1.6.10Apache Subversion 1.6.17Apache Subversion 1.6.14Apache Subversion 1.6.20Apache Subversion 1.6.7Apache Subversion 1.6.6Apache Subversion 1.6.16Apache Subversion 1.6.13Apache Subversion 1.6.19Apache Subversion 1.6.18Apache Subversion 1.6.5Apache Subversion 1.6.8Apache Subversion 1.6.0Apache Subversion 1.6.12Apache Subversion 1.6.1Apache Subversion 1.6.4Apache SubversionCollabnet Subversion 1.6.17Apache Subversion 1.6.9Apache Subversion 1.7.4Apache Subversion 1.7.3Apache Subversion 1.7.0Apache Subversion 1.7.8Apache Subversion 1.7.7Apache Subversion 1.7.2Apache Subversion 1.7.1Apache Subversion 1.7.6Apache Subversion 1.7.5Apache Subversion 1.7.9Opensuse Opensuse 11.4Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04
5.5
CVSSv2
CVE-2013-1968
Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name....
Apache Subversion 1.6.2Apache Subversion 1.6.1Apache Subversion 1.6.10Apache Subversion 1.6.9Apache Subversion 1.6.20Apache Subversion 1.6.19Apache Subversion 1.6.6Apache Subversion 1.6.5Apache Subversion 1.6.13Apache Subversion 1.6.12Apache Subversion 1.6.18Apache Subversion 1.6.15Apache Subversion 1.6.16Apache Subversion 1.6.3Apache Subversion 1.6.8Apache Subversion 1.6.0Apache Subversion 1.6.7Apache Subversion 1.6.4Apache Subversion 1.6.11Apache SubversionApache Subversion 1.6.14Apache Subversion 1.6.17Collabnet Subversion 1.6.17Apache Subversion 1.7.6Apache Subversion 1.7.0Apache Subversion 1.7.9Apache Subversion 1.7.7Apache Subversion 1.7.2Apache Subversion 1.7.1Apache Subversion 1.7.4Apache Subversion 1.7.3Apache Subversion 1.7.5Apache Subversion 1.7.8Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04Opensuse Opensuse 11.4
2.6
CVSSv2
CVE-2013-4505
The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service (resource consumption) via a relative URL in a REPORT request....
Apache Mod Dontdothat -Apache Subversion 1.8.1Apache Subversion 1.4.0Apache Subversion 1.5.0Apache Subversion 1.5.1Apache Subversion 1.5.8Apache Subversion 1.6.0Apache Subversion 1.6.16Apache Subversion 1.6.17Apache Subversion 1.6.3Apache Subversion 1.6.4Apache Subversion 1.7.1Apache Subversion 1.7.10Apache Subversion 1.6.10Apache Subversion 1.6.19Apache Subversion 1.4.5Apache Subversion 1.4.2Apache Subversion 1.7.11Apache Subversion 1.6.18Apache Subversion 1.6.21Apache Subversion 1.6.5Apache Subversion 1.7.6Apache Subversion 1.5.3Apache Subversion 1.5.7Apache Subversion 1.4.6Apache Subversion 1.7.12Apache Subversion 1.5.2Apache Subversion 1.6.1Apache Subversion 1.6.23Apache Subversion 1.6.15Apache Subversion 1.7.5Apache Subversion 1.6.14Apache Subversion 1.5.6Apache Subversion 1.6.6Apache Subversion 1.6.9Apache Subversion 1.4.1Apache Subversion 1.7.0Apache Subversion 1.7.3Apache Subversion 1.6.20Apache Subversion 1.6.2Apache Subversion 1.5.5Apache Subversion 1.7.4Apache Subversion 1.4.4Apache Subversion 1.7.9Apache Subversion 1.6.8Apache Subversion 1.6.13Apache Subversion 1.7.7Apache Subversion 1.6.7Apache Subversion 1.6.12Apache Subversion 1.7.2Apache Subversion 1.7.8Apache Subversion 1.4.3Apache Subversion 1.5.4Apache Subversion 1.6.11
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-36239CVE-2020-21806CVE-2021-31878arbitrary IDORCVE-2020-18158CVE-2021-3490remote code executionCVE-2021-20786
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook