CVE

Id
29707  
CVE No.
CVE-2007-6350  
Status
Candidate  
Description
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1) unison, (2) rsync, (3) svn, and (4) svnserve, as originally demonstrated by creating a Subversion (SVN) repository with malicious hooks, then using svn to trigger execution of those hooks.  
Phase
Assigned (20071214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
313293 29707 CVE-2007-6350 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=437148  View
313294 29707 CVE-2007-6350 CONFIRM:http://scponly.cvs.sourceforge.net/scponly/scponly/SECURITY?view=markup  View
313295 29707 CVE-2007-6350 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=201726  View
313296 29707 CVE-2007-6350 DEBIAN:DSA-1473  View
313297 29707 CVE-2007-6350 URL:http://www.debian.org/security/2008/dsa-1473  View
313298 29707 CVE-2007-6350 FEDORA:FEDORA-2008-1728  View
313299 29707 CVE-2007-6350 URL:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00595.html  View
313300 29707 CVE-2007-6350 FEDORA:FEDORA-2008-1743  View
313301 29707 CVE-2007-6350 URL:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00546.html  View
313302 29707 CVE-2007-6350 GENTOO:GLSA-200802-06  View
313303 29707 CVE-2007-6350 URL:http://security.gentoo.org/glsa/glsa-200802-06.xml  View
313304 29707 CVE-2007-6350 BID:26900  View
313305 29707 CVE-2007-6350 URL:http://www.securityfocus.com/bid/26900  View
313306 29707 CVE-2007-6350 VUPEN:ADV-2007-4243  View
313307 29707 CVE-2007-6350 URL:http://www.vupen.com/english/advisories/2007/4243  View
313308 29707 CVE-2007-6350 OSVDB:44137  View
313309 29707 CVE-2007-6350 URL:http://osvdb.org/44137  View
313310 29707 CVE-2007-6350 SECTRACK:1019103  View
313311 29707 CVE-2007-6350 URL:http://www.securitytracker.com/id?1019103  View
313312 29707 CVE-2007-6350 SECUNIA:28123  View
313313 29707 CVE-2007-6350 URL:http://secunia.com/advisories/28123  View
313314 29707 CVE-2007-6350 SECUNIA:28538  View
313315 29707 CVE-2007-6350 URL:http://secunia.com/advisories/28538  View
313316 29707 CVE-2007-6350 SECUNIA:28944  View
313317 29707 CVE-2007-6350 URL:http://secunia.com/advisories/28944  View
313318 29707 CVE-2007-6350 SECUNIA:28981  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52387 JVNDB-2007-001079 libexif における EXIF タグの取り扱いに関する整数オーバーフローの脆弱性 libexif には、画像ファイル中の EXIF タグの取り扱いに不備があり、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-6352 29707 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001079.html  View