CVE-2004-0749: Medium severity Subversion Subversion vulnerability
The modauthzsvn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0749?
CVE-2004-0749 is considered a medium severity vulnerability due to its ability to expose sensitive information.
How do I fix CVE-2004-0749?
To fix CVE-2004-0749, upgrade to Subversion version 1.0.8 or later, which addresses this access restriction issue.
What are the affected versions of Subversion in CVE-2004-0749?
CVE-2004-0749 affects Subversion versions 1.0.7 and earlier.
What attacks are possible due to CVE-2004-0749?
Attackers can exploit CVE-2004-0749 to gain unauthorized access to sensitive information through commands like svn log -v, svn propget, and svn blame.
Is CVE-2004-0749 related to specific software only?
Yes, CVE-2004-0749 specifically impacts the mod_authz_svn module within certain versions of CollabNet Subversion.