{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-09-29T00:00:00", "descriptions": [{"lang": "en", "value": "The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "FEDORA-2004-318", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://fedoranews.org/updates/FEDORA-2004-318.shtml"}, {"name": "subversion-information-disclosure(17472)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17472"}, {"name": "11243", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/11243"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt"}, {"name": "GLSA-200409-35", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-0749", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "FEDORA-2004-318", "refsource": "FEDORA", "url": "http://fedoranews.org/updates/FEDORA-2004-318.shtml"}, {"name": "subversion-information-disclosure(17472)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17472"}, {"name": "11243", "refsource": "BID", "url": "http://www.securityfocus.com/bid/11243"}, {"name": "http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt", "refsource": "CONFIRM", "url": "http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt"}, {"name": "GLSA-200409-35", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-0749", "datePublished": "2004-11-19T05:00:00", "dateReserved": "2004-07-26T00:00:00", "dateUpdated": "2017-07-10T14:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "4F10E314-3897-4A63-AE40-F4E34C3F0BFA", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "47B95A69-2535-4844-B819-082D4349708C", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "930953B4-E972-48FB-913B-169E91F93FD6", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "6B41D875-F515-4A3F-9AA5-79BD09F74C30", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "3A8CCC20-8986-4028-B125-66F371A4A1D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "6E07F13C-A6FC-49E8-B10E-E4FC1F182DA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "04AB9C70-10CB-460B-91AD-1D79C9153194", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "E1E718DB-2A79-4277-BA15-6E6A904E483A", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.1.0_rc1:*:*:*:*:*:*:*", "matchCriteriaId": "286B7EBD-D663-440C-859B-1E0EE839AEB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.1.0_rc2:*:*:*:*:*:*:*", "matchCriteriaId": "408EC889-4D8B-49FC-9281-AC85559BB774", "vulnerable": true}, {"criteria": "cpe:2.3:a:subversion:subversion:1.1.0_rc3:*:*:*:*:*:*:*", "matchCriteriaId": "F1E2A83E-A244-4F1E-85E9-6EA075D32C5B", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*", "matchCriteriaId": "980553F2-8662-47CF-95F0-645141746AEA", "vulnerable": true}, {"criteria": "cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*", "matchCriteriaId": "40EBF1CD-B392-4262-8F06-2C784ADAF0F0", "vulnerable": true}, {"criteria": "cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*", "matchCriteriaId": "9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074", "vulnerable": true}, {"criteria": "cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*", "matchCriteriaId": "960DC6C2-B285-41D4-96F7-ED97F8BD5482", "vulnerable": true}, {"criteria": "cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*", "matchCriteriaId": "65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB", "vulnerable": true}, {"criteria": "cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*", "matchCriteriaId": "D1FD0EB4-E744-4465-AFEE-A3C807C9C993", "vulnerable": true}, {"criteria": "cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*", "matchCriteriaId": "1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F", "vulnerable": true}, {"criteria": "cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*", "matchCriteriaId": "57772E3B-893C-408A-AA3B-78C972ED4D5E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames."}, {"lang": "es", "value": "El m\u00f3dulo mod_authz_svn en Subversion 1.0.7 y anteriores no restringe adecuadamente el acceso a todos los metadatos en rutas ilegibles, lo que podr\u00eda permitir a atacantes remotos ganar informaci\u00f3n sensible mediante (1) svn log -v, (2) svn propget, o (3) svn blame, y otras \u00f3rdenes que siguen cambios de de nombre."}], "id": "CVE-2004-0749", "lastModified": "2017-07-11T01:30:26.387", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-12-23T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://fedoranews.org/updates/FEDORA-2004-318.shtml"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/11243"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17472"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}