CVE-2007-6350
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 4.4%
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1) unison, (2) rsync, (3) svn, and (4) svnserve, as originally demonstrated by creating a Subversion (SVN) repository with malicious hooks, then using svn to trigger execution of those hooks.
Productos afectados
n/a · n/aReferencias
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=437148http://bugs.gentoo.org/show_bug.cgi?id=201726http://osvdb.org/44137http://scponly.cvs.sourceforge.net/scponly/scponly/SECURITY?view=markuphttp://secunia.com/advisories/28123http://secunia.com/advisories/28538http://secunia.com/advisories/28944http://secunia.com/advisories/28981http://security.gentoo.org/glsa/glsa-200802-06.xmlhttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00546.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00595.htmlhttp://www.debian.org/security/2008/dsa-1473