The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Addressbook | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Aug 28, 2015 | Jun 6, 2011 |
| Apple Osx Subversion | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Jun 6, 2011 |
| Centos_linux | — | Upgrade subversionUpgrade subversion-rubyUpgrade mod_dav_svnUpgrade subversion-develUpgrade subversion-javahlUpgrade subversion-perl | Dec 1, 2016 | Jun 6, 2011 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Jun 6, 2011 |
| Freebsd | — | Upgrade subversionUpgrade subversion-freebsd | Dec 10, 2025 | Jun 2, 2011 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion. | Oct 30, 2017 | Jun 6, 2011 |
| Oracle_linux | — | Upgrade subversion-rubyUpgrade subversion-javahlUpgrade subversion-kdeUpgrade mod_dav_svnUpgrade subversion-gnomeUpgrade subversion-perlUpgrade subversionUpgrade subversion-develUpgrade subversion-svn2cl | Oct 16, 2024 | Jun 6, 2011 |
| Suse | — | Upgrade libsvn_auth_kwallet-1-0Upgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-perlUpgrade subversion-pythonUpgrade subversion-bash-completionUpgrade subversion-develUpgrade subversionUpgrade subversion-serverUpgrade subversion-tools | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libapache2-svn | Nov 8, 2024 | Jun 6, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub