Vulnerabilities > Subversion > Subversion > 1.1.0.rc3

DATE CVE VULNERABILITY TITLE RISK
2009-08-07 CVE-2009-2411 Numeric Errors vulnerability in Subversion
Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.
8.5
2004-12-23 CVE-2004-0749 Information Disclosure vulnerability in Subversion Mod_Authz_Svn Metadata
The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
network
low complexity
subversion gentoo
5.0