Oracle Linux 4 / 5 : subversion (ELSA-2009-1203)

High Nessus Plugin ID 67906

Synopsis

The remote Oracle Linux host is missing one or more security updates.

Description

From Red Hat Security Advisory 2009:1203 :

Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Matt Lewis, of Google, reported multiple heap overflow flaws in Subversion (server and client) when parsing binary deltas. A malicious user with commit access to a server could use these flaws to cause a heap overflow on that server. A malicious server could use these flaws to cause a heap overflow on a client when it attempts to checkout or update. These heap overflows can result in a crash or, possibly, arbitrary code execution. (CVE-2009-2411)

All Subversion users should upgrade to these updated packages, which contain a backported patch to correct these issues. After installing the updated packages, the Subversion server must be restarted for the update to take effect: restart httpd if you are using mod_dav_svn, or restart svnserve if it is used.

Solution

Update the affected subversion packages.

See Also

https://oss.oracle.com/pipermail/el-errata/2009-August/001108.html

https://oss.oracle.com/pipermail/el-errata/2009-August/001110.html

Plugin Details

Severity: High

ID: 67906

File Name: oraclelinux_ELSA-2009-1203.nasl

Version: 1.8

Type: local

Agent: unix

Published: 2013/07/12

Updated: 2019/10/25

Dependencies: 12634

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 8.5

Temporal Score: 6.3

Vector: CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:oracle:linux:mod_dav_svn, p-cpe:/a:oracle:linux:subversion, p-cpe:/a:oracle:linux:subversion-devel, p-cpe:/a:oracle:linux:subversion-javahl, p-cpe:/a:oracle:linux:subversion-perl, p-cpe:/a:oracle:linux:subversion-ruby, cpe:/o:oracle:linux:4, cpe:/o:oracle:linux:5

Required KB Items: Host/local_checks_enabled, Host/OracleLinux, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2009/08/10

Vulnerability Publication Date: 2009/08/07

Reference Information

CVE: CVE-2009-2411

BID: 35983

RHSA: 2009:1203

CWE: 189