CVE-2010-3315
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.2%
authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.
Produtos afetados
n/a · n/aReferências
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.htmlhttp://secunia.com/advisories/41652http://secunia.com/advisories/43139http://secunia.com/advisories/43346http://security-tracker.debian.org/tracker/CVE-2010-3315https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19007http://subversion.apache.org/security/CVE-2010-3315-advisory.txthttp://support.apple.com/kb/HT4581http://www.debian.org/security/2010/dsa-2118http://www.mandriva.com/security/advisories?name=MDVSA-2010:199http://www.redhat.com/support/errata/RHSA-2011-0258.html