CVE-2013-4505 | BDVDB-2026-58738 Detail

Description#

The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service (resource consumption) via a relative URL in a REPORT request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/55855
http://subversion.apache.org/security/CVE-2013-4505-advisory.txt
http://osvdb.org/100364
http://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html
http://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html

Exploit#

No public exploit known

History#

Version 12013-12-07Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.