subversion is vulnerable to information disclosure. The partial access
functionality is not properly implemented, allowing users who have access to change paths to obtain confidential confidential information via propget
, proplist
or propedit
.
osvdb.org/36070
secunia.com/advisories/43139
securitytracker.com/id?1018237
subversion.tigris.org/security/CVE-2007-2448-advisory.txt
www.securityfocus.com/bid/24463
www.ubuntu.com/usn/USN-1053-1
www.vupen.com/english/advisories/2007/2230
www.vupen.com/english/advisories/2011/0264
access.redhat.com/errata/RHEA-2011:0039
issues.rpath.com/browse/RPL-1896