← back
CVE-2004-0397

CVE-2004-0397

EPSS 75.3%
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.
Affected products
n/a · n/a
public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/304unverifiedexploitdbwww.exploit-db.com/exploits/9935unverifiedexploitdbwww.exploit-db.com/exploits/16284unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021737.htmlhttp://marc.info/?l=bugtraq&m=108498676517697&w=2https://bugzilla.fedora.us/show_bug.cgi?id=1748http://secunia.com/advisories/11642http://secunia.com/advisories/11675http://security.e-matters.de/advisories/082004.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16191http://subversion.tigris.org/svn-sscanf-advisory.txthttp://www.gentoo.org/security/en/glsa/glsa-200405-14.xmlhttp://www.linuxsecurity.com/advisories/fedora_advisory-4373.htmlhttp://www.osvdb.org/6301http://www.securityfocus.com/archive/1/363814