CVE-2006-1564: Medium severity debian debian linux vulnerability
Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the (1) modauthzsvn.so and (2) moddavsvn.so modules, which might allow local users to gain privileges by installing malicious libraries in that directory.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1564?
CVE-2006-1564 is considered a moderate security vulnerability due to its potential to allow local privilege escalation.
How do I fix CVE-2006-1564?
To fix CVE-2006-1564, it is recommended to upgrade to a version of libapache2-svn that does not include the vulnerable RPATH settings.
Who is affected by CVE-2006-1564?
CVE-2006-1564 affects users of Debian GNU/Linux version 3.1 with libapache2-svn installed.
What components are impacted by CVE-2006-1564?
CVE-2006-1564 specifically impacts the mod_authz_svn.so and mod_dav_svn.so Apache modules.
Can CVE-2006-1564 be exploited remotely?
CVE-2006-1564 is not a remote vulnerability; it requires local user access to exploit.