CVE

Id
8841  
CVE No.
CVE-2004-0413  
Status
Candidate  
Description
libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow.  
Phase
Assigned (20040416)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56129 8841 CVE-2004-0413 BUGTRAQ:20041012 [FMADV] Subversion <= 1.04 Heap Overflow  View
56130 8841 CVE-2004-0413 URL:http://www.securityfocus.com/archive/1/365836  View
56131 8841 CVE-2004-0413 CONFIRM:http://subversion.tigris.org/security/CAN-2004-0413-advisory.txt  View
56132 8841 CVE-2004-0413 FEDORA:FEDORA-2004-165  View
56133 8841 CVE-2004-0413 URL:http://www.securityfocus.com/advisories/6847  View
56134 8841 CVE-2004-0413 FEDORA:FLSA:1748  View
56135 8841 CVE-2004-0413 URL:https://bugzilla.fedora.us/show_bug.cgi?id=1748  View
56136 8841 CVE-2004-0413 GENTOO:GLSA-200406-07  View
56137 8841 CVE-2004-0413 URL:http://www.gentoo.org/security/en/glsa/glsa-200406-07.xml  View
56138 8841 CVE-2004-0413 SUSE:SuSE-SA:2004:018  View
56139 8841 CVE-2004-0413 URL:http://www.novell.com/linux/security/advisories/2004_18_subversion.html  View
56140 8841 CVE-2004-0413 BID:10519  View
56141 8841 CVE-2004-0413 URL:http://www.securityfocus.com/bid/10519  View
56142 8841 CVE-2004-0413 XF:subversion-svn-bo(16396)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62879 JVNDB-2004-000221 CVS における不正な Entry ラインによるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2004-0414 8841 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000221.html  View