Test ID:	1.3.6.1.4.1.25623.1.0.702703
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2703-1)
Summary:	The remote host is missing an update for the Debian 'subversion' package(s) announced via the DSA-2703-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'subversion' package(s) announced via the DSA-2703-1 advisory. Vulnerability Insight: Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1968 Subversion repositories with the FSFS repository data store format can be corrupted by newline characters in filenames. A remote attacker with a malicious client could use this flaw to disrupt the service for other users using that repository. CVE-2013-2112 Subversion's svnserve server process may exit when an incoming TCP connection is closed early in the connection process. A remote attacker can cause svnserve to exit and thus deny service to users of the server. For the oldstable distribution (squeeze), these problems have been fixed in version 1.6.12dfsg-7. For the stable distribution (wheezy), these problems have been fixed in version 1.6.17dfsg-4+deb7u3. For the unstable distribution (sid), these problems will be fixed soon. We recommend that you upgrade your subversion packages. Affected Software/OS: 'subversion' package(s) on Debian 6, Debian 7. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1968 Debian Security Information: DSA-2703 (Google Search) http://www.debian.org/security/2013/dsa-2703 http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvRK51pQsybfvsAzjxQJrmVpL0fEa1K4WGkUP9Tzz6KFDw%40mail.gmail.com%3E http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvTxsMFeHgc8bK2V-2PrSrKoBffTi8%2BxbHA5tocrrewWew%40mail.gmail.com%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18986 RedHat Security Advisories: RHSA-2014:0255 http://rhn.redhat.com/errata/RHSA-2014-0255.html SuSE Security Announcement: openSUSE-SU-2013:1139 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-07/msg00015.html http://www.ubuntu.com/usn/USN-1893-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-2112 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19057
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.