module

Subversion Date Svnserve

Try Surface Command
Back to search
Disclosed
2004-05-19
Created
2018-05-30

Description

This is an exploit for the Subversion date parsing overflow. This
exploit is for the svnserve daemon (svn:// protocol) and will not work
for Subversion over webdav (http[s]://). This exploit should never
crash the daemon, and should be safe to do multi-hits.

**WARNING** This exploit seems to (not very often, I've only seen
it during testing) corrupt the subversion database, so be careful!

Author

spoonm spoonm@no$email.com

Platform

BSD,Linux

Architectures

x86

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


    msf > use exploit/multi/svn/svnserve_date
    msf exploit(svnserve_date) > show targets
        ...targets...
    msf exploit(svnserve_date) > set TARGET < target-id >
    msf exploit(svnserve_date) > show options
        ...show and set options...
    msf exploit(svnserve_date) > exploit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today