Lucene search
MitreCVE-2004-0749HistoryDec 23, 2004 - 5:00 a.m.
CVE-2004-0749
2004-12-2305:00:00
mitre
web.nvd.nist.gov
33
mod_authz_svn
subversion 1.0.7
vulnerability
remote access
sensitive information
nvd
cve-2004-0749
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.029
Percentile
90.8%
The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
Affected configurations
Node
subversionsubversionMatch1.0
ORsubversionsubversionMatch1.0.1
ORsubversionsubversionMatch1.0.2
ORsubversionsubversionMatch1.0.3
ORsubversionsubversionMatch1.0.4
ORsubversionsubversionMatch1.0.5
ORsubversionsubversionMatch1.0.6
ORsubversionsubversionMatch1.0.7
ORsubversionsubversionMatch1.1.0_rc1
ORsubversionsubversionMatch1.1.0_rc2
ORsubversionsubversionMatch1.1.0_rc3
Node
gentoolinuxMatch0.5
ORgentoolinuxMatch0.7
ORgentoolinuxMatch1.1a
ORgentoolinuxMatch1.2
ORgentoolinuxMatch1.4
ORgentoolinuxMatch1.4rc1
ORgentoolinuxMatch1.4rc2
ORgentoolinuxMatch1.4rc3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| subversion | subversion | 1.0 | cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:* |
| subversion | subversion | 1.0.1 | cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:* |
| subversion | subversion | 1.0.2 | cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:* |
| subversion | subversion | 1.0.3 | cpe:2.3:a:subversion:subversion:1.0.3:*:*:*:*:*:*:* |
| subversion | subversion | 1.0.4 | cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:* |
| subversion | subversion | 1.0.5 | cpe:2.3:a:subversion:subversion:1.0.5:*:*:*:*:*:*:* |
| subversion | subversion | 1.0.6 | cpe:2.3:a:subversion:subversion:1.0.6:*:*:*:*:*:*:* |
| subversion | subversion | 1.0.7 | cpe:2.3:a:subversion:subversion:1.0.7:*:*:*:*:*:*:* |
| subversion | subversion | 1.1.0_rc1 | cpe:2.3:a:subversion:subversion:1.1.0_rc1:*:*:*:*:*:*:* |
| subversion | subversion | 1.1.0_rc2 | cpe:2.3:a:subversion:subversion:1.1.0_rc2:*:*:*:*:*:*:* |
Related
debiancve
debiancve
CVE-2004-0749
2004-12-23 05:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200409-35 (Subversion)
2008-09-24 00:00:00
Subversion Module unreadeable path information disclosure
2005-11-03 00:00:00
Gentoo Security Advisory GLSA 200409-35 (Subversion)
2008-09-24 00:00:00
nvd
nvd
CVE-2004-0749
2004-12-23 05:00:00
nessus
nessus
gentoo
gentoo
Subversion: Metadata information leak
2004-09-29 00:00:00
freebsd
freebsd
subversion -- WebDAV fails to protect metadata
2004-09-15 00:00:00
cvelist
cvelist
CVE-2004-0749
2004-11-19 05:00:00
ubuntucve
ubuntucve
CVE-2004-0749
2004-12-23 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.029
Percentile
90.8%
Related for CVE-2004-0749