3.5 - CVE-2010-4644

Executive Summary

Informations
Name	CVE-2010-4644	First vendor Publication	2011-01-07
Vendor	Cve	Last vendor Modification	2023-02-13

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:S/C:N/I:N/A:P)
Cvss Base Score	3.5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	6.8	Authentication	Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4644

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-399	Resource Management Errors

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12798

Oval ID:	oval:org.mitre.oval:def:12798
Title:	USN-1053-1 -- subversion vulnerabilities
Description:	It was discovered that Subversion incorrectly handled certain "partial access" privileges in rare scenarios. Remote authenticated users could use this flaw to obtain sensitive information . This issue only applied to Ubuntu 6.06 LTS. It was discovered that the Subversion mod_dav_svn module for Apache did not properly handle a named repository as a rule scope. Remote authenticated users could use this flaw to bypass intended restrictions. This issue only applied to Ubuntu 9.10, 10.04 LTS, and 10.10. It was discovered that the Subversion mod_dav_svn module for Apache incorrectly handled the walk function. Remote authenticated users could use this flaw to cause the service to crash, leading to a denial of service. It was discovered that Subversion incorrectly handled certain memory operations. Remote authenticated users could use this flaw to consume large quantities of memory and cause the service to crash, leading to a denial of service. This issue only applied to Ubuntu 9.10, 10.04 LTS, and 10.10
Family:	unix	Class:	patch
Reference(s):	USN-1053-1 CVE-2007-2448 CVE-2010-3315 CVE-2010-4539 CVE-2010-4644	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.10 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06	Product(s):	subversion
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section subversion-tools DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND libsvn-doc DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND libsvn-javahl DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND libsvn-ruby DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libsvn-dev DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND python-subversion-dbg DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND libapache2-svn DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND libsvn-ruby1.8 DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND python-subversion DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND libsvn1 DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND subversion DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND libsvn-java DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 AND libsvn-perl DPKG is earlier than 1.4.6dfsg1-2ubuntu1.2 OR Release section Ubuntu 10.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section subversion-tools DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND libsvn-doc DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND libsvn-ruby DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is armel AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libsvn-dev DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND python-subversion-dbg DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND libapache2-svn DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND libsvn-ruby1.8 DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND python-subversion DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND libsvn-java DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND subversion DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND libsvn1 DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 AND libsvn-perl DPKG is earlier than 1.6.12dfsg-1ubuntu1.1 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section subversion-tools DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND libsvn-doc DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND libsvn-ruby DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is armel AND Packages section libsvn-dev DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND python-subversion-dbg DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND libapache2-svn DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND libsvn-ruby1.8 DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND python-subversion DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND libsvn-java DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND subversion DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND libsvn1 DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 AND libsvn-perl DPKG is earlier than 1.6.6dfsg-2ubuntu1.1 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section subversion-tools DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND libsvn-doc DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND libsvn-ruby DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is lpia AND Packages section libsvn-dev DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND python-subversion-dbg DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND libapache2-svn DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND libsvn-ruby1.8 DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND python-subversion DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND libsvn-java DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND subversion DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND libsvn1 DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 AND libsvn-perl DPKG is earlier than 1.6.5dfsg-1ubuntu1.1 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section subversion-tools DPKG is earlier than 1.3.1-3ubuntu1.3 AND python2.4-subversion DPKG is earlier than 1.3.1-3ubuntu1.3 AND libsvn-doc DPKG is earlier than 1.3.1-3ubuntu1.3 AND libsvn-ruby DPKG is earlier than 1.3.1-3ubuntu1.3 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libsvn0-dev DPKG is earlier than 1.3.1-3ubuntu1.3 AND libsvn-core-perl DPKG is earlier than 1.3.1-3ubuntu1.3 AND libapache2-svn DPKG is earlier than 1.3.1-3ubuntu1.3 AND libsvn-ruby1.8 DPKG is earlier than 1.3.1-3ubuntu1.3 AND python-subversion DPKG is earlier than 1.3.1-3ubuntu1.3 AND libsvn0 DPKG is earlier than 1.3.1-3ubuntu1.3 AND subversion DPKG is earlier than 1.3.1-3ubuntu1.3 AND libsvn-javahl DPKG is earlier than 1.3.1-3ubuntu1.3

Definition Id: oval:org.mitre.oval:def:21698

Oval ID:	oval:org.mitre.oval:def:21698
Title:	RHSA-2011:0258: subversion security update (Moderate)
Description:	Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0258-01 CVE-2010-3315 CVE-2010-4539 CVE-2010-4644	Version:	42
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	subversion
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section subversion-ruby is earlier than 0:1.6.11-2.el6_0.2 AND subversion-kde is earlier than 0:1.6.11-2.el6_0.2 AND subversion-svn2cl is earlier than 0:1.6.11-2.el6_0.2 AND subversion-javahl is earlier than 0:1.6.11-2.el6_0.2 AND subversion-devel is earlier than 0:1.6.11-2.el6_0.2 AND mod_dav_svn is earlier than 0:1.6.11-2.el6_0.2 AND subversion-gnome is earlier than 0:1.6.11-2.el6_0.2 AND subversion-perl is earlier than 0:1.6.11-2.el6_0.2 AND subversion is earlier than 0:1.6.11-2.el6_0.2

Definition Id: oval:org.mitre.oval:def:21915

Oval ID:	oval:org.mitre.oval:def:21915
Title:	RHSA-2011:0257: subversion security update (Moderate)
Description:	Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0257-01 CESA-2011:0257 CVE-2010-4539 CVE-2010-4644	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	subversion
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section subversion-devel is earlier than 0:1.6.11-7.el5_6.1 AND subversion is earlier than 0:1.6.11-7.el5_6.1 AND subversion-perl is earlier than 0:1.6.11-7.el5_6.1 AND subversion-ruby is earlier than 0:1.6.11-7.el5_6.1 AND subversion-javahl is earlier than 0:1.6.11-7.el5_6.1 AND mod_dav_svn is earlier than 0:1.6.11-7.el5_6.1

Definition Id: oval:org.mitre.oval:def:23029

Oval ID:	oval:org.mitre.oval:def:23029
Title:	ELSA-2011:0257: subversion security update (Moderate)
Description:	Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0257-01 CVE-2010-4539 CVE-2010-4644	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	subversion
Definition Synopsis:
Oracle Linux 5.x rpm test subversion-devel is earlier than 0:1.6.11-7.el5_6.1 AND subversion is earlier than 0:1.6.11-7.el5_6.1 AND subversion-perl is earlier than 0:1.6.11-7.el5_6.1 AND subversion-ruby is earlier than 0:1.6.11-7.el5_6.1 AND subversion-javahl is earlier than 0:1.6.11-7.el5_6.1 AND mod_dav_svn is earlier than 0:1.6.11-7.el5_6.1

Definition Id: oval:org.mitre.oval:def:23583

Oval ID:	oval:org.mitre.oval:def:23583
Title:	ELSA-2011:0258: subversion security update (Moderate)
Description:	Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0258-01 CVE-2010-3315 CVE-2010-4539 CVE-2010-4644	Version:	17
Platform(s):	Oracle Linux 6	Product(s):	subversion
Definition Synopsis:
Oracle Linux 6.x rpm test subversion-ruby is earlier than 0:1.6.11-2.el6_0.2 AND subversion-kde is earlier than 0:1.6.11-2.el6_0.2 AND subversion-svn2cl is earlier than 0:1.6.11-2.el6_0.2 AND subversion-javahl is earlier than 0:1.6.11-2.el6_0.2 AND subversion-devel is earlier than 0:1.6.11-2.el6_0.2 AND mod_dav_svn is earlier than 0:1.6.11-2.el6_0.2 AND subversion-gnome is earlier than 0:1.6.11-2.el6_0.2 AND subversion-perl is earlier than 0:1.6.11-2.el6_0.2 AND subversion is earlier than 0:1.6.11-2.el6_0.2

Definition Id: oval:org.mitre.oval:def:27213

Oval ID:	oval:org.mitre.oval:def:27213
Title:	DEPRECATED: ELSA-2011-0257 -- subversion security update (moderate)
Description:	[1.6.11-7.1] - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672676)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-0257 CVE-2010-4539 CVE-2010-4644	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	subversion
Definition Synopsis:
Oracle Linux 5.x Packages match section subversion is earlier than 0:1.6.11-7.el5_6.1 AND mod_dav_svn is earlier than 0:1.6.11-7.el5_6.1 AND subversion-devel is earlier than 0:1.6.11-7.el5_6.1 AND subversion-javahl is earlier than 0:1.6.11-7.el5_6.1 AND subversion-perl is earlier than 0:1.6.11-7.el5_6.1 AND subversion-ruby is earlier than 0:1.6.11-7.el5_6.1

Definition Id: oval:org.mitre.oval:def:28181

Oval ID:	oval:org.mitre.oval:def:28181
Title:	DEPRECATED: ELSA-2011-0258 -- subversion security update (moderate)
Description:	[1.6.11-2.2] - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672678) [1.6.11-2.1] - add security fix for CVE-2010-3315 (#640322)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-0258 CVE-2010-3315 CVE-2010-4539 CVE-2010-4644	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	subversion
Definition Synopsis:
Oracle Linux 6.x Packages match section subversion is earlier than 0:1.6.11-2.el6_0.2 AND mod_dav_svn is earlier than 0:1.6.11-2.el6_0.2 AND subversion-devel is earlier than 0:1.6.11-2.el6_0.2 AND subversion-gnome is earlier than 0:1.6.11-2.el6_0.2 AND subversion-javahl is earlier than 0:1.6.11-2.el6_0.2 AND subversion-kde is earlier than 0:1.6.11-2.el6_0.2 AND subversion-perl is earlier than 0:1.6.11-2.el6_0.2 AND subversion-ruby is earlier than 0:1.6.11-2.el6_0.2 AND subversion-svn2cl is earlier than 0:1.6.11-2.el6_0.2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apache Subversion cpe:2.3:a:apache:subversion:1.6.9:::::::* cpe:2.3:a:apache:subversion:1.6.8:::::::* cpe:2.3:a:apache:subversion:1.6.7:::::::* cpe:2.3:a:apache:subversion:1.6.6:::::::* cpe:2.3:a:apache:subversion:1.6.5:::::::* cpe:2.3:a:apache:subversion:1.6.4:::::::* cpe:2.3:a:apache:subversion:1.6.3:::::::* cpe:2.3:a:apache:subversion:1.6.2:::::::* cpe:2.3:a:apache:subversion:1.6.14:::::::* cpe:2.3:a:apache:subversion:1.6.13:::::::* cpe:2.3:a:apache:subversion:1.6.12:::::::* cpe:2.3:a:apache:subversion:1.6.11:::::::* cpe:2.3:a:apache:subversion:1.6.10:::::::* cpe:2.3:a:apache:subversion:1.6.1:::::::* cpe:2.3:a:apache:subversion:1.6.0:::::::* cpe:2.3:a:apache:subversion:1.5.8:::::::* cpe:2.3:a:apache:subversion:1.5.7:::::::* cpe:2.3:a:apache:subversion:1.5.6:::::::* cpe:2.3:a:apache:subversion:1.5.5:::::::* cpe:2.3:a:apache:subversion:1.5.4:::::::* cpe:2.3:a:apache:subversion:1.5.3:::::::* cpe:2.3:a:apache:subversion:1.5.2:::::::* cpe:2.3:a:apache:subversion:1.5.1:::::::* cpe:2.3:a:apache:subversion:1.5.0:::::::* cpe:2.3:a:apache:subversion:1.4.6:::::::* cpe:2.3:a:apache:subversion:1.4.5:::::::* cpe:2.3:a:apache:subversion:1.4.4:::::::* cpe:2.3:a:apache:subversion:1.4.3:::::::* cpe:2.3:a:apache:subversion:1.4.2:::::::* cpe:2.3:a:apache:subversion:1.4.1:::::::* cpe:2.3:a:apache:subversion:1.4.0:::::::* cpe:2.3:a:apache:subversion:1.3.2:::::::* cpe:2.3:a:apache:subversion:1.3.1:::::::* cpe:2.3:a:apache:subversion:1.3.0:::::::* cpe:2.3:a:apache:subversion:1.2.3:::::::* cpe:2.3:a:apache:subversion:1.2.2:::::::* cpe:2.3:a:apache:subversion:1.2.1:::::::* cpe:2.3:a:apache:subversion:1.2.0:::::::* cpe:2.3:a:apache:subversion:1.1.4:::::::* cpe:2.3:a:apache:subversion:1.1.3:::::::* cpe:2.3:a:apache:subversion:1.1.2:::::::* cpe:2.3:a:apache:subversion:1.1.1:::::::* cpe:2.3:a:apache:subversion:1.1.0:::::::* cpe:2.3:a:apache:subversion:1.0.9:::::::* cpe:2.3:a:apache:subversion:1.0.8:::::::* cpe:2.3:a:apache:subversion:1.0.7:::::::* cpe:2.3:a:apache:subversion:1.0.6:::::::* cpe:2.3:a:apache:subversion:1.0.5:::::::* cpe:2.3:a:apache:subversion:1.0.4:::::::* cpe:2.3:a:apache:subversion:1.0.3:::::::* cpe:2.3:a:apache:subversion:1.0.2:::::::* cpe:2.3:a:apache:subversion:1.0.1:::::::* cpe:2.3:a:apache:subversion:1.0.0:::::::* cpe:2.3:a:apache:subversion:0.9:::::::* cpe:2.3:a:apache:subversion:0.8:::::::* cpe:2.3:a:apache:subversion:0.7:::::::* cpe:2.3:a:apache:subversion:0.6:::::::* cpe:2.3:a:apache:subversion:0.37.0:::::::* cpe:2.3:a:apache:subversion:0.36.0:::::::* cpe:2.3:a:apache:subversion:0.35.1:::::::* cpe:2.3:a:apache:subversion:0.35.0:::::::* cpe:2.3:a:apache:subversion:0.34.0:::::::* cpe:2.3:a:apache:subversion:0.33.1:::::::* cpe:2.3:a:apache:subversion:0.33.0:::::::* cpe:2.3:a:apache:subversion:0.32.1:::::::* cpe:2.3:a:apache:subversion:0.31.0:::::::* cpe:2.3:a:apache:subversion:0.30.0:::::::* cpe:2.3:a:apache:subversion:0.29.0:::::::* cpe:2.3:a:apache:subversion:0.28.2:::::::* cpe:2.3:a:apache:subversion:0.28.1:::::::* cpe:2.3:a:apache:subversion:0.28.0:::::::* cpe:2.3:a:apache:subversion:0.27.0:::::::* cpe:2.3:a:apache:subversion:0.26.0:::::::* cpe:2.3:a:apache:subversion:0.25.0:::::::* cpe:2.3:a:apache:subversion:0.24.2:::::::* cpe:2.3:a:apache:subversion:0.24.1:::::::* cpe:2.3:a:apache:subversion:0.24.0:::::::* cpe:2.3:a:apache:subversion:0.23.0:::::::* cpe:2.3:a:apache:subversion:0.22.2:::::::* cpe:2.3:a:apache:subversion:0.22.1:::::::* cpe:2.3:a:apache:subversion:0.22.0:::::::* cpe:2.3:a:apache:subversion:0.21.0:::::::* cpe:2.3:a:apache:subversion:0.20.1:::::::* cpe:2.3:a:apache:subversion:0.20.0:::::::* cpe:2.3:a:apache:subversion:0.19.1:::::::* cpe:2.3:a:apache:subversion:0.19.0:::::::* cpe:2.3:a:apache:subversion:0.18.1:::::::* cpe:2.3:a:apache:subversion:0.18.0:::::::* cpe:2.3:a:apache:subversion:0.17.1:::::::* cpe:2.3:a:apache:subversion:0.17.0:::::::* cpe:2.3:a:apache:subversion:0.16.1:::::::* cpe:2.3:a:apache:subversion:0.16:::::::* cpe:2.3:a:apache:subversion:0.15:::::::* cpe:2.3:a:apache:subversion:0.14.5:::::::* cpe:2.3:a:apache:subversion:0.14.4:::::::* cpe:2.3:a:apache:subversion:0.14.3:::::::* cpe:2.3:a:apache:subversion:0.14.2:::::::* cpe:2.3:a:apache:subversion:0.14.1:::::::* cpe:2.3:a:apache:subversion:0.14.0:::::::* cpe:2.3:a:apache:subversion:0.13.2:::::::* cpe:2.3:a:apache:subversion:0.13.1:::::::* cpe:2.3:a:apache:subversion:0.13.0:::::::* cpe:2.3:a:apache:subversion:0.12.0:::::::* cpe:2.3:a:apache:subversion:0.11.1:::::::* cpe:2.3:a:apache:subversion:0.10.2:::::::* cpe:2.3:a:apache:subversion:0.10.1:::::::* cpe:2.3:a:apache:subversion:0.10.0:::::::* cpe:2.3:a:apache:subversion:m4/m5:::::::* cpe:2.3:a:apache:subversion:m3:::::::* cpe:2.3:a:apache:subversion:m2:::::::* cpe:2.3:a:apache:subversion:m1:::::::* cpe:2.3:a:apache:subversion::::::::	112

OpenVAS Exploits

Date	Description
2012-07-30	Name : CentOS Update for mod_dav_svn CESA-2011:0257 centos5 x86_64 File : nvt/gb_CESA-2011_0257_mod_dav_svn_centos5_x86_64.nasl
2012-06-05	Name : RedHat Update for subversion RHSA-2011:0258-01 File : nvt/gb_RHSA-2011_0258-01_subversion.nasl
2011-08-09	Name : CentOS Update for mod_dav_svn CESA-2011:0257 centos5 i386 File : nvt/gb_CESA-2011_0257_mod_dav_svn_centos5_i386.nasl
2011-02-18	Name : RedHat Update for subversion RHSA-2011:0257-01 File : nvt/gb_RHSA-2011_0257-01_subversion.nasl
2011-02-04	Name : Ubuntu Update for subversion vulnerabilities USN-1053-1 File : nvt/gb_ubuntu_USN_1053_1.nasl
2011-01-24	Name : FreeBSD Ports: subversion File : nvt/freebsd_subversion2.nasl
2011-01-21	Name : Fedora Update for subversion FEDORA-2011-0099 File : nvt/gb_fedora_2011_0099_subversion_fc14.nasl
2011-01-21	Name : Mandriva Update for subversion MDVSA-2011:006 (subversion) File : nvt/gb_mandriva_MDVSA_2011_006.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
70333	Apache Subversion rev_hunt.c blame Command Multiple Memory Leak Remote DoS Apache Subversion contains a flaw that may allow a remote denial of service. The issue is triggered when multiple memory leaks in 'rev_hunt.c' occur, allowing a remote authenticated attacker to cause a denial of service by memory consumption via the -g option to the blame command.

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libsvn_auth_gnome_keyring-1-0-110119.nasl - Type : ACT_GATHER_INFO
2013-09-24	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201309-11.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0257.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0258.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110215_subversion_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110215_subversion_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libsvn_auth_gnome_keyring-1-0-110119.nasl - Type : ACT_GATHER_INFO
2011-04-15	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0257.nasl - Type : ACT_GATHER_INFO
2011-02-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0257.nasl - Type : ACT_GATHER_INFO
2011-02-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0258.nasl - Type : ACT_GATHER_INFO
2011-02-02	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1053-1.nasl - Type : ACT_GATHER_INFO
2011-01-28	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-006.nasl - Type : ACT_GATHER_INFO
2011-01-19	Name : The remote Fedora host is missing a security update. File : fedora_2011-0099.nasl - Type : ACT_GATHER_INFO
2011-01-14	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_716120991e9311e0a587001b77d09812.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/45655
CONFIRM	http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES http://svn.apache.org/viewvc?view=revision&revision=1032808
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230...
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2011:006
MISC	http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C4CD3... http://mail-archives.apache.org/mod_mbox/www-announce/201011.mbox/%3CAANLkTi=...
MLIST	http://openwall.com/lists/oss-security/2011/01/02/1 http://openwall.com/lists/oss-security/2011/01/04/10 http://openwall.com/lists/oss-security/2011/01/04/8 http://openwall.com/lists/oss-security/2011/01/05/4 http://svn.haxx.se/dev/archive-2010-11/0102.shtml
REDHAT	http://www.redhat.com/support/errata/RHSA-2011-0257.html http://www.redhat.com/support/errata/RHSA-2011-0258.html
SECTRACK	http://www.securitytracker.com/id?1024935
SECUNIA	http://secunia.com/advisories/42780 http://secunia.com/advisories/42969 http://secunia.com/advisories/43115 http://secunia.com/advisories/43139 http://secunia.com/advisories/43346
SUSE	http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
UBUNTU	http://www.ubuntu.com/usn/USN-1053-1
VUPEN	http://www.vupen.com/english/advisories/2011/0015 http://www.vupen.com/english/advisories/2011/0103 http://www.vupen.com/english/advisories/2011/0162 http://www.vupen.com/english/advisories/2011/0264
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/64473

Alert History

If you want to see full details history, please login or register.

Date	Informations
2023-02-13 09:29:02	Multiple Updates
2021-05-05 01:07:48	Multiple Updates
2021-05-04 12:13:13	Multiple Updates
2021-04-22 01:13:39	Multiple Updates
2020-05-23 01:43:13	Multiple Updates
2020-05-23 00:27:06	Multiple Updates
2017-08-17 09:23:11	Multiple Updates
2016-04-26 20:18:44	Multiple Updates
2014-06-14 13:29:56	Multiple Updates
2014-02-17 10:59:04	Multiple Updates
2014-02-12 13:22:06	Multiple Updates
2013-05-10 23:39:06	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	7
CPE ID(s)	112
Sources(s)	27
osvdb(s)	1
Openvas Exploit(s)	8
Nessus® Exploit(s)	14

	Related
7.8	GLSA-201309-11
6.8	USN-1053-1
6.8	RHSA-2011:0258
6.8	RHSA-2011:0257
6.8	MDVSA-2011:006
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 5 more Alert(s)

3.5 - CVE-2010-4644

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU