The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

The remote host is affected by the vulnerability described in GLSA-201610-05 (Subversion, Serf: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Subversion and Serf.
      Please review the CVE identifiers referenced below for details   Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, conduct a man-in-the-middle attack, obtain       sensitive information, or cause a Denial of Service Condition.
  Workaround :

    There is no known workaround at this time.

Updated subversion packages fix security vulnerabilities :

The mod_dav_svn module in Apache Subversion before 1.8.8, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via an OPTIONS request (CVE-2014-0032).

Ben Reser discovered that Subversion did not correctly validate SSL certificates containing wildcards. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications (CVE-2014-3522).

Bert Huijben discovered that Subversion did not properly handle cached credentials. A malicious server could possibly use this issue to obtain credentials cached for a different server (CVE-2014-3528).

A NULL pointer dereference flaw was found in the way mod_dav_svn handled REPORT requests. A remote, unauthenticated attacker could use a crafted REPORT request to crash mod_dav_svn (CVE-2014-3580).

A NULL pointer dereference flaw was found in the way mod_dav_svn handled URIs for virtual transaction names. A remote, unauthenticated attacker could send a request for a virtual transaction name that does not exist, causing mod_dav_svn to crash (CVE-2014-8108).

The Apple Xcode installed on the remote Mac OS X host is prior to version 6.2. It is, therefore, affected by the following vulnerabilities :

  - Numerous errors exist related to the bundled version of Apache Subversion. (CVE-2014-3522, CVE-2014-3528,     CVE-2014-3580, CVE-2014-8108)

  - An error exists related to the bundled version of Git that allows arbitrary files to be added to the .git     folder. (CVE-2014-9390)

The version of Subversion Server installed on the remote host is version 1.x.x prior to 1.7.18 or 1.8.x prior to 1.8.10. It is, therefore, affected by the following vulnerabilities :

  - A flaw exists in the Serf RA layer. This flaw causes     wildcards for HTTPS connections to be improperly     evaluated, which may result in the application     accepting certificates that are not matched against the     proper hostname. This may allow a remote     man-in-the-middle attacker to intercept traffic and     spoof valid sessions. (CVE-2014-3522)

  - An MD5 hash of the URL and authentication realm are     used to store cached credentials, which may allow     remote attackers to obtain these credentials via a     specially crafted authentication realm. (CVE-2014-3528)

This update includes the latest stable release of **Apache Subversion**, version **1.8.10**.

**Client-side bugfixes:**

  - guard against md5 hash collisions when finding cached     credentials

    - ra_serf: properly match wildcards in SSL certs.

    - ra_serf: ignore the CommonName in SSL certs where       there are Subject Alt Names

    - ra_serf: fix a URI escaping bug that prevented       deleting locked paths

    - rm: Display the proper URL when deleting a URL in the       commit log editor

    - log: Fix another instance of broken pipe error

    - copy: Properly handle props not present or excluded on       cross wc copy

    - copy: Fix copying parents of locally deleted nodes       between wcs

    - externals: Properly delete ancestor directories of       externals when removing the external by changing       svn:externals.

    - ra_serf: fix memory lifetime of some hash values

**Server-side bugfixes:**

  - fsfs: omit config file when creating pre-1.5 format     repos

**Bindings:**

  - ruby: removing warning about Ruby 1.9 support being new.

    - python: fix notify_func callbacks

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This subversion and libserf update fixes several security and non security issues :

  - subversion: guard against md5 hash collisions when     finding cached credentials [bnc#889849] [CVE-2014-3528]

  - subversion: ra_serf: properly match wildcards in SSL     certs. [bnc#890511] [CVE-2014-3522]

  - libserf: Handle NUL bytes in fields of an X.509     certificate. [bnc#890510] [CVE-2014-3504]

Lieven Govaerts discovered that the Subversion mod_dav_svn module incorrectly handled certain request methods when SVNListParentPath was enabled. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2014-0032)

Ben Reser discovered that Subversion did not correctly validate SSL certificates containing wildcards. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. (CVE-2014-3522)

Bert Huijben discovered that Subversion did not properly handle cached credentials. A malicious server could possibly use this issue to obtain credentials cached for a different server. (CVE-2014-3528).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Subversion Project reports :

Using the Serf RA layer of Subversion for HTTPS uses the apr_fnmatch API to handle matching wildcards in certificate Common Names and Subject Alternate Names. However, apr_fnmatch is not designed for this purpose. Instead it is designed to behave like common shell globbing.
In particular this means that '*' is not limited to a single label within a hostname (i.e. it will match '.'). But even further apr_fnmatch supports '?' and character classes (neither of which are part of the RFCs defining how certificate validation works).

Subversion stores cached credentials by an MD5 hash based on the URL and the authentication realm of the server the credentials are cached for. MD5 has been shown to be subject to chosen plaintext hash collisions. This means it may be possible to generate an authentication realm which results in the same MD5 hash for a different URL.

ID	Name	Product	Family	Severity
93992	GLSA-201610-05 : Subversion, Serf: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
82338	Mandriva Linux Security Advisory : subversion (MDVSA-2015:085)	Nessus	Mandriva Local Security Checks	medium
81758	Apple Xcode < 6.2 (Mac OS X)	Nessus	MacOS X Local Security Checks	medium
78356	Amazon Linux AMI : subversion (ALAS-2014-413)	Nessus	Amazon Linux Local Security Checks	medium
78068	Apache Subversion 1.0.x - 1.7.17 / 1.8.x < 1.8.10 Multiple Vulnerabilities	Nessus	Windows	medium
77428	Fedora 20 : subversion-1.8.10-1.fc20 (2014-9636)	Nessus	Fedora Local Security Checks	medium
77364	openSUSE Security Update : libserf / subversion (openSUSE-SU-2014:1059-1)	Nessus	SuSE Local Security Checks	medium
77219	Ubuntu 14.04 LTS : Subversion vulnerabilities (USN-2316-1)	Nessus	Ubuntu Local Security Checks	high
77125	FreeBSD : subversion -- several vulnerabilities (83a418cc-2182-11e4-802c-20cf30e32f6d)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2014-3522

medium

Tenable Plugins

high

medium

medium

medium

medium

medium

medium

high

medium