Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Apache Subversion 'mod_dav_svn' Module Multiple DoS Vulnerabilities
Information
Severity
Severity
Medium
Family
Family
Denial of Service
CVSSv2 Base
CVSSv2 Base
5.0
CVSSv2 Vector
CVSSv2 Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Solution Type
Solution Type
Vendor Patch
Created
Created
9 years ago
Modified
Modified
3 years ago
Summary
The host is running Apache Subversion and is prone to multiple denial of service vulnerabilities.
Insight
Insight
An error within the 'mod_dav_svn' module when handling - 'LOCK' requests against a URL for a non-existent path or invalid activity URL that supports anonymous locks. - 'PROPFIND' request on an activity URL.
Affected Software
Affected Software
Apache Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8
Solution
Solution
Upgrade to Apache Subversion version 1.6.21 or 1.7.9 or later.