CVE-2004-0749 | BDVDB-2026-7388 Detail

Description#

The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://fedoranews.org/updates/FEDORA-2004-318.shtml
https://exchange.xforce.ibmcloud.com/vulnerabilities/17472
http://www.securityfocus.com/bid/11243
http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt
http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml

Exploit#

No public exploit known

History#

Version 12004-11-19Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.