CVE

Id
8825  
CVE No.
CVE-2004-0397  
Status
Candidate  
Description
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.  
Phase
Assigned (20040413)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
55902 8825 CVE-2004-0397 FULLDISC:20040519 Advisory 08/2004: Subversion remote vulnerability  View
55903 8825 CVE-2004-0397 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021737.html  View
55904 8825 CVE-2004-0397 BUGTRAQ:20040519 Advisory 08/2004: Subversion remote vulnerability  View
55905 8825 CVE-2004-0397 URL:http://marc.info/?l=bugtraq&m=108498676517697&w=2  View
55906 8825 CVE-2004-0397 MISC:http://security.e-matters.de/advisories/082004.html  View
55907 8825 CVE-2004-0397 CONFIRM:http://subversion.tigris.org/svn-sscanf-advisory.txt  View
55908 8825 CVE-2004-0397 FEDORA:FEDORA-2004-128  View
55909 8825 CVE-2004-0397 URL:http://www.linuxsecurity.com/advisories/fedora_advisory-4373.html  View
55910 8825 CVE-2004-0397 FEDORA:FLSA:1748  View
55911 8825 CVE-2004-0397 URL:https://bugzilla.fedora.us/show_bug.cgi?id=1748  View
55912 8825 CVE-2004-0397 GENTOO:GLSA-200405-14  View
55913 8825 CVE-2004-0397 URL:http://www.gentoo.org/security/en/glsa/glsa-200405-14.xml  View
55914 8825 CVE-2004-0397 BUGTRAQ:20040519 [OpenPKG-SA-2004.023] OpenPKG Security Advisory (subversion)  View
55915 8825 CVE-2004-0397 URL:http://www.securityfocus.com/archive/1/363814  View
55916 8825 CVE-2004-0397 BID:10386  View
55917 8825 CVE-2004-0397 URL:http://www.securityfocus.com/bid/10386  View
55918 8825 CVE-2004-0397 OSVDB:6301  View
55919 8825 CVE-2004-0397 URL:http://www.osvdb.org/6301  View
55920 8825 CVE-2004-0397 SECUNIA:11642  View
55921 8825 CVE-2004-0397 URL:http://secunia.com/advisories/11642  View
55922 8825 CVE-2004-0397 SECUNIA:11675  View
55923 8825 CVE-2004-0397 URL:http://secunia.com/advisories/11675  View
55924 8825 CVE-2004-0397 XF:subversion-date-parsing-command-execution(16191)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62863 JVNDB-2004-000205 Cadaver が使用する neon の ne_rfc1036_parse() 関数におけるヒープオーバーフローの脆弱性 cadaver が使用する neon の日付解釈ルーチンには、ne_rfc1036_parse() 関数において、取り扱う値の妥当性の確認が不適切であるため、意図的に作成された不正な文字列が渡されると sscanf() 関数でヒープオーバーフローを発生する脆弱性が存在します。 CVE-2004-0398 8825 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000205.html  View