CVE-2016-2167

svnserve, the svn:// protocol server, can optionally use the Cyrus SASL library for authentication, integrity protection, and encryption.
Due to a programming oversight, authentication against Cyrus SASL would permit the remote user to specify a realm string which is a prefix of the expected realm string.

CVE-2016-2168

Subversion's httpd servers are vulnerable to a remotely triggerable crash in the mod_authz_svn module. The crash can occur during an authorization check for a COPY or MOVE request with a specially crafted header value.

This allows remote attackers to cause a denial of service.

-- James GPG Key: 4096R/331BA3DB 2011-12-05 James McCoy <jamessan@debian.org>

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 1.9.4 (#1331222) CVE-2016-2167 CVE-2016-2168 -     Move tools in docs to tools subpackage (rhbz 1171757     1199761) - Disable make check to work around FTBFS

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Subversion project reports :

svnserve, the svn:// protocol server, can optionally use the Cyrus SASL library for authentication, integrity protection, and encryption.
Due to a programming oversight, authentication against Cyrus SASL would permit the remote user to specify a realm string which is a prefix of the expected realm string.

Subversion's httpd servers are vulnerable to a remotely triggerable crash in the mod_authz_svn module. The crash can occur during an authorization check for a COPY or MOVE request with a specially crafted header value.

This allows remote attackers to cause a denial of service.

Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2016-2167     Daniel Shahaf and James McCoy discovered that an     implementation error in the authentication against the     Cyrus SASL library would permit a remote user to specify     a realm string which is a prefix of the expected realm     string and potentially allowing a user to authenticate     using the wrong realm.

  - CVE-2016-2168     Ivan Zhakov of VisualSVN discovered a remotely     triggerable denial of service vulnerability in the     mod_authz_svn module during COPY or MOVE authorization     check. An authenticated remote attacker could take     advantage of this flaw to cause a denial of service     (Subversion server crash) via COPY or MOVE requests with     specially crafted header.

- Update to 1.9.4 (#1331222) CVE-2016-2167 CVE-2016-2168

  - Move tools in docs to tools subpackage (rhbz 1171757     1199761)

  - Disable make check to work around FTBFS

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201610-05 (Subversion, Serf: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Subversion and Serf.
      Please review the CVE identifiers referenced below for details   Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, conduct a man-in-the-middle attack, obtain       sensitive information, or cause a Denial of Service Condition.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
90805	Debian DLA-448-1 : subversion security update	Nessus	Debian Local Security Checks	2016/5/2	2021/1/11	medium
91059	Fedora 24 : subversion-1.9.4-1.fc24 (2016-20cc04ac50)	Nessus	Fedora Local Security Checks	2016/5/12	2021/1/11	medium
90780	FreeBSD : subversion -- multiple vulnerabilities (c8174b63-0d3a-11e6-b06e-d43d7eed0ce2)	Nessus	FreeBSD Local Security Checks	2016/4/29	2021/1/4	medium
90808	Debian DSA-3561-1 : subversion - security update	Nessus	Debian Local Security Checks	2016/5/2	2021/1/11	medium
92183	Fedora 23 : subversion (2016-e024b3e02b)	Nessus	Fedora Local Security Checks	2016/7/14	2026/2/2	medium
93992	GLSA-201610-05 : Subversion, Serf: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2016/10/12	2026/1/22	high

检测

插件搜索

medium

medium

medium

medium

medium

high