Back to Database
Status published
Medium
CVE-2004-0749
The mod_authz_svn module in Subversion 1.0.7 and earlier does not...
Vulnerability Description
The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0749
Credits & Attribution
No credits recorded in the NVD database.
References
More from subversion
View All →CVE-2009-2411
Multiple integer overflows in the libsvn_delta library in Subversion before...
High
8.5
CVE-2007-3846
Directory traversal vulnerability in Subversion before 1.4.5, as used by...
Medium
6
CVE-2007-2448
Subversion 1.4.3 and earlier does not properly implement the "partial...
Low
2.1
CVE-2004-1438
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows...
Low
2.1
CVE-2004-0397
Stack-based buffer overflow during the apr_time_t data conversion in Subversion...
High
7.5
Affected Vendor
subversion
View all reports →Affected Software
subversion, linux
Vulnerable Versions:
1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.1.0_rc1, 1.1.0_rc2, 1.1.0_rc3, 0.5, 0.7, 1.1a, 1.2, 1.4
Timeline
Official Publish:
November 19th, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.