ID de Prueba:	1.3.6.1.4.1.25623.1.0.802055
Categoría:	Denial of Service
Título:	Apache Subversion 'mod_dav_svn' Module Multiple DoS Vulnerabilities
Resumen:	Apache Subversion is prone to multiple denial of service vulnerabilities.
Descripción:	Summary: Apache Subversion is prone to multiple denial of service vulnerabilities. Vulnerability Insight: An error within the 'mod_dav_svn' module when handling - 'LOCK' requests against a URL for a non-existent path or invalid activity URL that supports anonymous locks. - 'PROPFIND' request on an activity URL. Vulnerability Impact: Successful exploitation will let the remote attackers to cause a segfault. NOTE : Configurations which allow anonymous read access to the repository will be vulnerable. Affected Software/OS: Apache Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 Solution: Upgrade to Apache Subversion version 1.6.21 or 1.7.9 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1847 http://www.mandriva.com/security/advisories?name=MDVSA-2013:153 http://mail-archives.apache.org/mod_mbox/subversion-announce/201304.mbox/%3CCADkdwvRoyVrZV12tgC0FMGrc6%2BMisd3qTcZ%2BDdpFGgTahkgAkQ%40mail.gmail.com%3E http://mail-archives.apache.org/mod_mbox/subversion-announce/201304.mbox/%3CCADkdwvSTMLbn4q_KM3Ph2UOeSiPGhEK4%3DSvwEjaHW_GUGkYWPQ%40mail.gmail.com%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18538 RedHat Security Advisories: RHSA-2013:0737 http://rhn.redhat.com/errata/RHSA-2013-0737.html SuSE Security Announcement: openSUSE-SU-2013:0687 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html SuSE Security Announcement: openSUSE-SU-2013:0932 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-06/msg00069.html http://www.ubuntu.com/usn/USN-1893-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-1849 http://seclists.org/fulldisclosure/2013/Mar/56 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18980
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.