CVE-2004-1438
published 2004-12-31CVE-2004-1438: The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read…
PriorityP411low2.1CVSS 2.0
AVLACLAuNCPINAN
EPSS
0.70%
49.4th percentile
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | subversion | >= 0 < 1.0.6-1 | 1.0.6-1 |
| apache | subversion | >= 0 < 1.0.6-1 | 1.0.6-1 |
| apache | subversion | >= 0 < 1.0.6-1 | 1.0.6-1 |
| apache | subversion | >= 0 < 1.0.6-1 | 1.0.6-1 |
| debian | subversion | < subversion 1.0.6-1 (bookworm) | subversion 1.0.6-1 (bookworm) |
| subversion | subversion | — | — |
| subversion | subversion | — | — |
| subversion | subversion | — | — |
| subversion | subversion | — | — |
| subversion | subversion | — | — |
| subversion | subversion | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv2.1LOW
vendor_debian2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w39v-wcwg-3989: The mod_authz_svn Apache module for Subversion 1
ghsa_unreviewed·2022-04-29
CVE-2004-1438 [LOW] GHSA-w39v-wcwg-3989: The mod_authz_svn Apache module for Subversion 1
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
OSV
CVE-2004-1438: The mod_authz_svn Apache module for Subversion 1
osv·2004-12-31·CVSS 2.1
CVE-2004-1438 [LOW] CVE-2004-1438: The mod_authz_svn Apache module for Subversion 1
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
Debian
CVE-2004-1438: subversion - The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remot...
vendor_debian·2004·CVSS 2.1
CVE-2004-1438 [LOW] CVE-2004-1438: subversion - The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remot...
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
Scope: local
bookworm: resolved (fixed in 1.0.6-1)
bullseye: resolved (fixed in 1.0.6-1)
forky: resolved (fixed in 1.0.6-1)
sid: resolved (fixed in 1.0.6-1)
trixie: resolved (fixed in 1.0.6-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://securityreason.com/securityalert/60http://securitytracker.com/id?1010779http://svn.collab.net/repos/svn/tags/1.0.6/CHANGEShttp://www.gentoo.org/security/en/glsa/glsa-200407-20.xmlhttp://www.securityfocus.com/bid/10800https://exchange.xforce.ibmcloud.com/vulnerabilities/16803http://securityreason.com/securityalert/60http://securitytracker.com/id?1010779http://svn.collab.net/repos/svn/tags/1.0.6/CHANGEShttp://www.gentoo.org/security/en/glsa/glsa-200407-20.xmlhttp://www.securityfocus.com/bid/10800https://exchange.xforce.ibmcloud.com/vulnerabilities/16803
2004-12-31
Published