GCVE - cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:*

part: a version: 1.0.4 update: *

Vendor	Subversion (`6f01e428-640a-5261-9dbe-d396c0153409`)
Product	Subversion (`c10da80b-298f-51c3-a2b7-5f721c3548bb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2411`	vulnerable	2026-06-08 04:51:28.304657	Details available Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412. Published: 2009-08-07T19:00:00.000Z Updated: 2024-08-07T05:52:15.197Z Open on db.gcve.eu Reference links http://svn.haxx.se/dev/archive-2009-08/0108.shtml http://www.securitytracker.com/id?1022697 http://www.vupen.com/english/advisories/2009/2180 http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html http://secunia.com/advisories/36262	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1438`	vulnerable	2026-06-08 04:47:54.074595	Details available The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command. Published: 2005-02-13T05:00:00.000Z Updated: 2024-08-08T00:53:23.539Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/10800 http://www.gentoo.org/security/en/glsa/glsa-200407-20.xml http://svn.collab.net/repos/svn/tags/1.0.6/CHANGES http://securitytracker.com/id?1010779 https://exchange.xforce.ibmcloud.com/vulnerabilities/16803	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0749`	vulnerable	2026-06-08 04:47:51.082694	Details available The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames. Published: 2004-11-19T05:00:00.000Z Updated: 2024-08-08T00:31:46.965Z Open on db.gcve.eu Reference links http://fedoranews.org/updates/FEDORA-2004-318.shtml https://exchange.xforce.ibmcloud.com/vulnerabilities/17472 http://www.securityfocus.com/bid/11243 http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0413`	vulnerable	2026-06-08 04:47:49.738875	Details available libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow. Published: 2004-06-23T04:00:00.000Z Updated: 2024-08-08T00:17:14.957Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/10519 https://bugzilla.fedora.us/show_bug.cgi?id=1748 http://www.novell.com/linux/security/advisories/2004_18_subversion.html http://www.securityfocus.com/advisories/6847 http://www.gentoo.org/security/en/glsa/glsa-200406-07.xml	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Subversion

Notes

PURL mappings

Vulnerability references

Contribute