REDHAT-BUG-1262928: Medium severity Subversion Workbench vulnerability

Published Sep 14, 2015

Updated

A vulnerability in Workbench was found. If a user was tricked into using the "Command Shell" menu item while in a directory with a specially-crafted name, svn-workbench would execute arbitrary commands with the permissions of the user.

Reproducer available at:

http://seclists.org/oss-sec/2015/q3/542

Affected Software

1 affected component

Subversion Workbench

Event History

Sep 14, 2015

Data Sourced

via Red Hat·04:13 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1262928?

The severity of REDHAT-BUG-1262928 is considered high due to the potential for arbitrary command execution by unprivileged users.

How do I fix REDHAT-BUG-1262928?

To fix REDHAT-BUG-1262928, update to the latest version of the Subversion Workbench that addresses the vulnerability.

What causes the vulnerability in REDHAT-BUG-1262928?

The vulnerability in REDHAT-BUG-1262928 is caused by improper handling of directory names in the Command Shell menu, which allows command injection.

Who is affected by REDHAT-BUG-1262928?

Users of Subversion Workbench who interact with the Command Shell in directories with specially-crafted names are affected by REDHAT-BUG-1262928.

Can REDHAT-BUG-1262928 be exploited remotely?

No, REDHAT-BUG-1262928 requires user interaction to exploit, as it involves the use of the Command Shell menu.