Subversion reports :

CVE-2015-3184 : Subversion's mod_authz_svn does not properly restrict anonymous access in some mixed anonymous/authenticated environments when using Apache httpd 2.4.

CVE-2015-3187 : Subversion servers, both httpd and svnserve, will reveal some paths that should be hidden by path-based authz.

An assertion failure flaw was found in the way the SVN server processed certain requests with dynamically evaluated revision numbers. A remote attacker could use this flaw to cause the SVN server (both svnserve and httpd with the mod_dav_svn module) to crash.
(CVE-2015-0248)

It was found that the mod_authz_svn module did not properly restrict anonymous access to Subversion repositories under certain configurations when used with Apache httpd 2.4.x. This could allow a user to anonymously access files in a Subversion repository, which should only be accessible to authenticated users. (CVE-2015-3184)

It was found that the mod_dav_svn module did not properly validate the svn:author property of certain requests. An attacker able to create new revisions could use this flaw to spoof the svn:author property.
(CVE-2015-0251)

It was found that when an SVN server (both svnserve and httpd with the mod_dav_svn module) searched the history of a file or a directory, it would disclose its location in the repository if that file or directory was not readable (for example, if it had been moved).
(CVE-2015-3187)

After installing the updated packages, for the update to take effect, you must restart the httpd daemon, if you are using mod_dav_svn, and the svnserve daemon, if you are serving Subversion repositories via the svn:// protocol.

Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. The mod_dav_svn module is used with the Apache HTTP Server to allow access to Subversion repositories via HTTP.

An assertion failure flaw was found in the way the SVN server processed certain requests with dynamically evaluated revision numbers. A remote attacker could use this flaw to cause the SVN server (both svnserve and httpd with the mod_dav_svn module) to crash.
(CVE-2015-0248)

It was found that the mod_authz_svn module did not properly restrict anonymous access to Subversion repositories under certain configurations when used with Apache httpd 2.4.x. This could allow a user to anonymously access files in a Subversion repository, which should only be accessible to authenticated users. (CVE-2015-3184)

It was found that the mod_dav_svn module did not properly validate the svn:author property of certain requests. An attacker able to create new revisions could use this flaw to spoof the svn:author property.
(CVE-2015-0251)

It was found that when an SVN server (both svnserve and httpd with the mod_dav_svn module) searched the history of a file or a directory, it would disclose its location in the repository if that file or directory was not readable (for example, if it had been moved).
(CVE-2015-3187)

Red Hat would like to thank the Apache Software Foundation for reporting these issues. Upstream acknowledges Evgeny Kotkov of VisualSVN as the original reporter of CVE-2015-0248 and CVE-2015-0251, and C. Michael Pilato of CollabNet as the original reporter of CVE-2015-3184 and CVE-2015-3187 flaws.

All subversion users should upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, for the update to take effect, you must restart the httpd daemon, if you are using mod_dav_svn, and the svnserve daemon, if you are serving Subversion repositories via the svn:// protocol.

This update fixes the following security issues :

  - CVE-2015-5343: Possible remotely triggerable heap     overflow and out-of-bounds read in mod_dav_svn caused by     integer overflow when parsing skel-encoded request     bodies. (bsc#958300)

  - CVE-2015-3184: mod_authz_svn information leak     information in mixed anonymous/authenticated httpd (dav)     configurations (bsc#939514)

  - CVE-2015-3187: hidden paths leaked by path-based authz     (bsc#939517)

Several security issues have been found in the server components of the version control system subversion.

  - CVE-2015-3184     Subversion's mod_authz_svn does not properly restrict     anonymous access in some mixed anonymous/authenticated     environments when using Apache httpd 2.4. The result is     that anonymous access may be possible to files for which     only authenticated access should be possible. This issue     does not affect the oldstable distribution (wheezy)     because it only contains Apache httpd 2.2.

  - CVE-2015-3187     Subversion servers, both httpd and svnserve, will reveal     some paths that should be hidden by path-based authz.
    When a node is copied from an unreadable location to a     readable location the unreadable path may be revealed.
    This vulnerablity only reveals the path, it does not     reveal the contents of the path.

subversion was updated to version 1.8.14 to fix two security issues.

These security issues were fixed :

  - CVE-2015-3187: Information leak (only paths) that were     hidden by path-based authz (bsc#939517).

  - CVE-2015-3184: Information leak in mixed     anonymous/authenticated httpd (dav) configurations     (bsc#939514).

The remote host is affected by the vulnerability described in GLSA-201610-05 (Subversion, Serf: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Subversion and Serf.
      Please review the CVE identifiers referenced below for details   Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, conduct a man-in-the-middle attack, obtain       sensitive information, or cause a Denial of Service Condition.
  Workaround :

    There is no known workaround at this time.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1742 advisory.

    [1.7.14-7.1]
    - add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,       CVE-2015-3187

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
85257	FreeBSD : subversion -- multiple vulnerabilities (57bb5e3d-3c4f-11e5-a4d4-001e8c75030d)	Nessus	FreeBSD Local Security Checks	2015/8/7	2021/1/6	medium
85867	Scientific Linux Security Update : subversion on SL7.x x86_64 (20150908)	Nessus	Scientific Linux Local Security Checks	2015/9/9	2021/1/14	medium
86510	CentOS 7 : subversion (CESA-2015:1742)	Nessus	CentOS Local Security Checks	2015/10/22	2021/1/4	medium
87624	openSUSE Security Update : subversion (openSUSE-2015-949)	Nessus	SuSE Local Security Checks	2015/12/29	2021/1/19	high
85354	Debian DSA-3331-1 : subversion - security update	Nessus	Debian Local Security Checks	2015/8/13	2021/1/11	medium
85524	openSUSE Security Update : subversion (openSUSE-2015-549)	Nessus	SuSE Local Security Checks	2015/8/19	2021/1/19	medium
93992	GLSA-201610-05 : Subversion, Serf: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2016/10/12	2026/1/22	high
85865	Oracle Linux 7 : subversion (ELSA-2015-1742)	Nessus	Oracle Linux Local Security Checks	2015/9/9	2024/11/1	high

检测

插件搜索

medium

medium

medium

high

medium

medium

high

high