Test ID:	1.3.6.1.4.1.25623.1.0.69377
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1096-1 (subversion)
Summary:	Ubuntu USN-1096-1 (subversion)
Description:	The remote host is missing an update to subversion announced via advisory USN-1096-1. Details follow: Philip Martin discovered that the Subversion mod_dav_svn module for Apache did not properly handle certain requests containing a lock token. A remote attacker could use this flaw to cause the service to crash, leading to a denial of service. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libapache2-svn 1.3.1-3ubuntu1.4 Ubuntu 8.04 LTS: libapache2-svn 1.4.6dfsg1-2ubuntu1.3 Ubuntu 9.10: libapache2-svn 1.6.5dfsg-1ubuntu1.2 Ubuntu 10.04 LTS: libapache2-svn 1.6.6dfsg-2ubuntu1.2 Ubuntu 10.10: libapache2-svn 1.6.12dfsg-1ubuntu1.2 After a standard system update you need to restart any applications that use Subversion, such as Apache when using mod_dav_svn, to make all the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-1096-1 Risk factor : Medium
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0715 http://svn.haxx.se/dev/archive-2011-03/0122.shtml http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html Debian Security Information: DSA-2181 (Google Search) http://www.debian.org/security/2011/dsa-2181 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056071.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056736.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:067 RedHat Security Advisories: RHSA-2011:0327 https://rhn.redhat.com/errata/RHSA-2011-0327.html RedHat Security Advisories: RHSA-2011:0328 https://rhn.redhat.com/errata/RHSA-2011-0328.html http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.479953 http://www.ubuntu.com/usn/USN-1096-1 BugTraq ID: 46734 http://www.securityfocus.com/bid/46734 http://www.osvdb.org/70964 http://securitytracker.com/id?1025161 http://secunia.com/advisories/43603 http://secunia.com/advisories/43583 http://secunia.com/advisories/43672 http://secunia.com/advisories/43794 http://www.vupen.com/english/advisories/2011/0567 http://www.vupen.com/english/advisories/2011/0568 http://www.vupen.com/english/advisories/2011/0624 http://www.vupen.com/english/advisories/2011/0660 http://www.vupen.com/english/advisories/2011/0684 http://www.vupen.com/english/advisories/2011/0776 http://www.vupen.com/english/advisories/2011/0885 XForce ISS Database: subversion-moddavsvn-dos(65876) http://xforce.iss.net/xforce/xfdb/65876
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: