National Cyber Awareness System

Vulnerability Summary for CVE-2011-0715

Overview

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.

Description

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=680755

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=680755

External Source: MLIST

Name: [dev] 20110303 Subversion 1.6.16 Released

Type: Patch Information

Hyperlink:http://svn.haxx.se/dev/archive-2011-03/0122.shtml

External Source: CONFIRM

Name: http://svn.apache.org/viewvc?view=revision&revision=1071307

Type: Patch Information

Hyperlink:http://svn.apache.org/viewvc?view=revision&revision=1071307

External Source: REDHAT

Name: RHSA-2011:0328

Hyperlink:https://rhn.redhat.com/errata/RHSA-2011-0328.html

External Source: REDHAT

Name: RHSA-2011:0327

Hyperlink:https://rhn.redhat.com/errata/RHSA-2011-0327.html

External Source: XF

Name: subversion-moddavsvn-dos(65876)

Hyperlink:http://xforce.iss.net/xforce/xfdb/65876

External Source: VUPEN

Name: ADV-2011-0885

Hyperlink:http://www.vupen.com/english/advisories/2011/0885

External Source: VUPEN

Name: ADV-2011-0776

Hyperlink:http://www.vupen.com/english/advisories/2011/0776

External Source: VUPEN

Name: ADV-2011-0684

Hyperlink:http://www.vupen.com/english/advisories/2011/0684

External Source: VUPEN

Name: ADV-2011-0660

Hyperlink:http://www.vupen.com/english/advisories/2011/0660

External Source: VUPEN

Name: ADV-2011-0624

Hyperlink:http://www.vupen.com/english/advisories/2011/0624

External Source: VUPEN

Name: ADV-2011-0568

Hyperlink:http://www.vupen.com/english/advisories/2011/0568

External Source: VUPEN

Name: ADV-2011-0567

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0567

External Source: UBUNTU

Name: USN-1096-1

Hyperlink:http://www.ubuntu.com/usn/USN-1096-1

External Source: BID

Name: 46734

Hyperlink:http://www.securityfocus.com/bid/46734

External Source: OSVDB

Name: 70964

Hyperlink:http://www.osvdb.org/70964

External Source: MANDRIVA

Name: MDVSA-2011:067

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:067

External Source: DEBIAN

Name: DSA-2181

Hyperlink:http://www.debian.org/security/2011/dsa-2181

External Source: CONFIRM

Name: http://svn.apache.org/viewvc?view=revision&revision=1071239

Hyperlink:http://svn.apache.org/viewvc?view=revision&revision=1071239

External Source: CONFIRM

Name: http://svn.apache.org/repos/asf/subversion/tags/1.6.16/CHANGES

Hyperlink:http://svn.apache.org/repos/asf/subversion/tags/1.6.16/CHANGES

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4723

Hyperlink:http://support.apple.com/kb/HT4723

External Source: CONFIRM

Name: http://subversion.apache.org/security/CVE-2011-0715-advisory.txt

Type: Advisory

Hyperlink:http://subversion.apache.org/security/CVE-2011-0715-advisory.txt

External Source: SLACKWARE

Name: SSA:2011-070-01

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.479953

External Source: SECTRACK

Name: 1025161

Hyperlink:http://securitytracker.com/id?1025161

External Source: SECUNIA

Name: 43794

Hyperlink:http://secunia.com/advisories/43794

External Source: SECUNIA

Name: 43672

Hyperlink:http://secunia.com/advisories/43672

External Source: SECUNIA

Name: 43603

Type: Advisory

Hyperlink:http://secunia.com/advisories/43603

External Source: SECUNIA

Name: 43583

Hyperlink:http://secunia.com/advisories/43583

External Source: FEDORA

Name: FEDORA-2011-3775

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056736.html

External Source: FEDORA

Name: FEDORA-2011-2698

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056071.html

External Source: FEDORA

Name: FEDORA-2011-2657

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056071.html

External Source: APPLE

Name: APPLE-SA-2011-06-23-1

Hyperlink:http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html