CVE-2015-0251

MEDIUM

Description

The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.

References

http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html

http://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html

http://rhn.redhat.com/errata/RHSA-2015-1633.html

http://rhn.redhat.com/errata/RHSA-2015-1742.html

http://seclists.org/fulldisclosure/2015/Jun/32

http://subversion.apache.org/security/CVE-2015-0251-advisory.txt

http://www.debian.org/security/2015/dsa-3231

http://www.mandriva.com/security/advisories?name=MDVSA-2015:192

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

http://www.securityfocus.com/bid/74259

http://www.securitytracker.com/id/1033214

http://www.ubuntu.com/usn/USN-2721-1

https://security.gentoo.org/glsa/201610-05

https://support.apple.com/HT205217

Details

Source: MITRE

Published: 2015-04-08

Updated: 2018-10-30

Type: CWE-345

Risk Information

CVSS v2.0

Base Score: 4

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

Impact Score: 2.9

Exploitability Score: 8

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:apache:subversion:1.5.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.5.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.5.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.5.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.5.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.5.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.5.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.10:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.11:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.12:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.13:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.14:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.15:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.16:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.17:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.18:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.19:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.20:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.21:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.6.23:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.10:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.11:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.12:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.13:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.14:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.15:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.16:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.17:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.18:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.7.19:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.10:*:*:*:*:*:*:*

cpe:2.3:a:apache:subversion:1.8.11:*:*:*:*:*:*:*

Configuration 2

OR

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Configuration 3

OR

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7.z:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Configuration 4

OR

cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*

Configuration 5

OR

cpe:2.3:a:apple:xcode:7.0:*:*:*:*:*:*:*

Tenable Plugins

View all (19 total)

IDNameProductFamilySeverity
93992GLSA-201610-05 : Subversion, Serf: Multiple VulnerabilitiesNessusGentoo Local Security Checks
high
86510CentOS 7 : subversion (CESA-2015:1742)NessusCentOS Local Security Checks
medium
8972Apache Subversion 1.7.x < 1.7.20 / 1.8.x < 1.8.12 Multiple VulnerabilitiesNessus Network MonitorWeb Servers
high
86245Apple Xcode < 7.0 (Mac OS X) (POODLE)NessusMacOS X Local Security Checks
high
85978RHEL 7 : subversion (RHSA-2015:1742)NessusRed Hat Local Security Checks
medium
85867Scientific Linux Security Update : subversion on SL7.x x86_64 (20150908)NessusScientific Linux Local Security Checks
medium
85865Oracle Linux 7 : subversion (ELSA-2015-1742)NessusOracle Linux Local Security Checks
medium
85632Amazon Linux AMI : subversion / mod_dav_svn (ALAS-2015-587)NessusAmazon Linux Local Security Checks
high
85579Ubuntu 12.04 LTS / 14.04 LTS / 15.04 : subversion vulnerabilities (USN-2721-1)NessusUbuntu Local Security Checks
high
85503Scientific Linux Security Update : subversion on SL6.x i386/x86_64 (20150817)NessusScientific Linux Local Security Checks
medium
85494RHEL 6 : subversion (RHSA-2015:1633)NessusRed Hat Local Security Checks
medium
85489Oracle Linux 6 : subversion (ELSA-2015-1633)NessusOracle Linux Local Security Checks
medium
85461CentOS 6 : subversion (CESA-2015:1633)NessusCentOS Local Security Checks
medium
85065Fedora 21 : subversion-1.8.13-7.fc21 (2015-11795)NessusFedora Local Security Checks
high
83060Debian DLA-207-1 : subversion security updateNessusDebian Local Security Checks
medium
82930Debian DSA-3231-1 : subversion - security updateNessusDebian Local Security Checks
medium
82635openSUSE Security Update : subversion (openSUSE-2015-289)NessusSuSE Local Security Checks
high
82563Mandriva Linux Security Advisory : subversion (MDVSA-2015:192)NessusMandriva Local Security Checks
high
82481FreeBSD : subversion -- DoS vulnerabilities (8e887b71-d769-11e4-b1c2-20cf30e32f6d)NessusFreeBSD Local Security Checks
high