Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-0749

The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.

Published

2004-12-23T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application subversion subversion 1.0 Yes
Application subversion subversion 1.0.1 Yes
Application subversion subversion 1.0.2 Yes
Application subversion subversion 1.0.3 Yes
Application subversion subversion 1.0.4 Yes
Application subversion subversion 1.0.5 Yes
Application subversion subversion 1.0.6 Yes
Application subversion subversion 1.0.7 Yes
Application subversion subversion 1.1.0_rc1 Yes
Application subversion subversion 1.1.0_rc2 Yes
Application subversion subversion 1.1.0_rc3 Yes
Operating System gentoo linux 0.5 Yes
Operating System gentoo linux 0.7 Yes
Operating System gentoo linux 1.1a Yes
Operating System gentoo linux 1.2 Yes
Operating System gentoo linux 1.4 Yes
Operating System gentoo linux 1.4 Yes
Operating System gentoo linux 1.4 Yes
Operating System gentoo linux 1.4 Yes
References