Upstream information
Description
Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.SUSE information
Overall state of this security issue: Resolved
This issue is currently not rated by SUSE as it is not affecting the SUSE Enterprise products.
National Vulnerability Database | |
---|---|
Base Score | 2.1 |
Vector | AV:N/AC:H/Au:S/C:P/I:N/A:N |
Access Vector | Network |
Access Complexity | High |
Authentication | Single |
Confidentiality Impact | Partial |
Integrity Impact | None |
Availability Impact | None |
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 11 SP4 GA subversion-1.6.17-1.33.1 |
openSUSE Tumbleweed |
| Patchnames: openSUSE-Tumbleweed-2024-11412 |
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 03:26:26 2013CVE page last modified: Tue Sep 3 18:12:03 2024