CVE-2010-3315 authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not prope...
MediumCVSS 6.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache subversion | = 1.6.0 | No fix listed |
| apache subversion | = 1.6.1 | No fix listed |
| apache subversion | = 1.6.2 | No fix listed |
| apache subversion | = 1.6.3 | No fix listed |
| apache subversion | = 1.6.4 | No fix listed |
| apache subversion | = 1.6.5 | No fix listed |
| apache subversion | = 1.6.6 | No fix listed |
| apache subversion | = 1.6.7 | No fix listed |
| apache subversion | = 1.6.8 | No fix listed |
| apache subversion | = 1.6.9 | No fix listed |
| apache subversion | = 1.6.10 | No fix listed |
| apache subversion | = 1.6.11 | No fix listed |
| apache subversion | = 1.6.12 | No fix listed |
| apache subversion | = 1.5.0 | No fix listed |
| apache subversion | = 1.5.1 | No fix listed |
| apache subversion | = 1.5.2 | No fix listed |
| apache subversion | = 1.5.3 | No fix listed |
| apache subversion | = 1.5.4 | No fix listed |
| apache subversion | = 1.5.5 | No fix listed |
| apache subversion | = 1.5.6 | No fix listed |
| apache subversion | = 1.5.7 | No fix listed |
| debian/subversion(Debian:12) | < 1.6.12dfsg-2 | 1.6.12dfsg-2 |
| debian/subversion(Debian:13) | < 1.6.12dfsg-2 | 1.6.12dfsg-2 |
| debian/subversion(Debian:14) | < 1.6.12dfsg-2 | 1.6.12dfsg-2 |
References
- APPLE-SA-2011-03-21-1 vendor-advisory
- SUSE-SR:2010:024 vendor-advisory
- 41652 third-party-advisory vendor-advisory
- 43139 third-party-advisory
- 43346 third-party-advisory
- security-tracker.debian.org
- subversion.apache.org patch
- support.apple.com
- DSA-2118 vendor-advisory
- MDVSA-2010:199 vendor-advisory
- RHSA-2011:0258 vendor-advisory
- USN-1053-1 vendor-advisory
- ADV-2011-0264 vdb-entry
- oval:org.mitre.oval:def:19007 signature vdb-entry
- Debian Security Tracker CVE-2010-3315 vendor-advisory