Published: 05/05/2016 Updated: 07/11/2023

CVSS v2 Base Score: 4.9 | Impact Score: 4.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 6.8 | Impact Score: 5.2 | Exploitability Score: 1.6

VMScore: 436

Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N

The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion prior to 1.8.16 and 1.9.x prior to 1.9.4, when Cyrus SASL authentication is used, allows remote malicious users to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repository realm string.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache subversion
apache subversion 1.9.3
apache subversion 1.9.1
apache subversion 1.9.0
apache subversion 1.9.2

Several security issues were fixed in Subversion ...

The canonicalize_username function in svnserve/cyrus_authc in Apache Subversion before 1816 and 19x before 194, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repository realm string (CVE-2016-2167) The req_check_acces ...

The canonicalize_username function in svnserve/cyrus_authc in Apache Subversion before 1816 and 19x before 194, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repository realm string ...

CWE-284 http://www.debian.org/security/2016/dsa-3561 http://www.securitytracker.com/id/1035706 http://subversion.apache.org/security/CVE-2016-2167-advisory.txt http://www.securityfocus.com/bid/89417 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.417496 http://lists.opensuse.org/opensuse-updates/2016-05/msg00044.html http://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184545.html https://security.gentoo.org/glsa/201610-05 https://www.oracle.com/security-alerts/cpuoct2020.html http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgJet+7_MAhomFVOXPgLtewcUw9w=k9zdPCkq5tvPxVMA%40mail.gmail.com%3E http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgfn1iKueW51EpmXzXi_URNfGNofZSgOyW1_jnSeNm5DQ%40mail.gmail.com%3E https://nvd.nist.gov https://usn.ubuntu.com/3388-2/

CVE-2016-2167

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect