Red Hat Security AdvisoryRHSA-2011:0862
subversion security update
Released 2011-06-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) mod_dav_svn-1.6.11-7.el5_6.4, mod_dav_svn-1.6.11-7.el5_6.4.i386, mod_dav_svn-1.6.11-7.el5_6.4.ia64 +21
- Red Hat Enterprise Linux Server (v. 6) mod_dav_svn-1.6.11-2.el6_1.4, subversion-1.6.11-2.el6_1.4, subversion-1.6.11-2.el6_1.4.ppc +1
- Red Hat Enterprise Linux Server Optional (v. 6) subversion-1.6.11-2.el6_1.4, subversion-devel-1.6.11-2.el6_1.4, subversion-devel-1.6.11-2.el6_1.4.ppc +11
Fixes 3 records
Priority LOW 34
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a b…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.08483 · Published 2011-06-06 · Fixed CWE-476
Priority LOW 30
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of se…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.06742 · Published 2011-06-06 · Fixed
Priority LOW 29
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for file…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05993 · Published 2011-06-06 · Fixed CWE-264
THREATIST.IORead the docs