Total vulnerabilities in the database
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
| Software | From | Fixed in |
|---|---|---|
| apache / subversion | 1.5.5 | 1.5.5.x |
| apache / subversion | 1.5.3 | 1.5.3.x |
| apache / subversion | 1.5.7 | 1.5.7.x |
| apache / subversion | 1.5.8 | 1.5.8.x |
| apache / subversion | 1.5.2 | 1.5.2.x |
| apache / subversion | 1.5.4 | 1.5.4.x |
| apache / subversion | 1.5.1 | 1.5.1.x |
| apache / subversion | 1.5.6 | 1.5.6.x |
| apache / subversion | 1.5.0 | 1.5.0.x |
| apache / subversion | 1.6.10 | 1.6.10.x |
| apache / subversion | 1.6.2 | 1.6.2.x |
| apache / subversion | 1.6.16 | 1.6.16.x |
| apache / subversion | 1.6.5 | 1.6.5.x |
| apache / subversion | 1.6.3 | 1.6.3.x |
| apache / subversion | 1.6.8 | 1.6.8.x |
| apache / subversion | 1.6.13 | 1.6.13.x |
| apache / subversion | 1.6.0 | 1.6.0.x |
| apache / subversion | 1.6.7 | 1.6.7.x |
| apache / subversion | 1.6.12 | 1.6.12.x |
| apache / subversion | 1.6.1 | 1.6.1.x |
| apache / subversion | 1.6.4 | 1.6.4.x |
| apache / subversion | 1.6.15 | 1.6.15.x |
| apache / subversion | 1.6.11 | 1.6.11.x |
| apache / subversion | 1.6.14 | 1.6.14.x |
| apache / subversion | 1.6.6 | 1.6.6.x |
| apache / subversion | 1.6.9 | 1.6.9.x |