NVD

Id
49658  
Name
CVE-2009-2411  
Description
Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-07  
Modified Date
2010-08-21  
Seq
2009-2411  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250953 49658 CVE-2009-2411 20090807 Subversion heap overflow  View
250954 49658 CVE-2009-2411 APPLE-SA-2009-11-09-1  View
250955 49658 CVE-2009-2411 oval:org.mitre.oval:def:11465  View
250956 49658 CVE-2009-2411 http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt  View
250957 49658 CVE-2009-2411 http://support.apple.com/kb/HT3937  View
250958 49658 CVE-2009-2411 http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES  View
250959 49658 CVE-2009-2411 http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES  View
250960 49658 CVE-2009-2411 [dev] 20090806 Subversion 1.6.4 Released  View
250961 49658 CVE-2009-2411 [dev] 20090806 Subversion 1.5.7 Released  View
250962 49658 CVE-2009-2411 [dev] 20090806 Patch to 1.4.x branch for CVE-2009-2411  View
250963 49658 CVE-2009-2411 DSA-1855  View
250964 49658 CVE-2009-2411 MDVSA-2009:199  View
250965 49658 CVE-2009-2411 RHSA-2009:1203  View
250966 49658 CVE-2009-2411 35983  View
250967 49658 CVE-2009-2411 1022697  View
250968 49658 CVE-2009-2411 USN-812-1  View
250969 49658 CVE-2009-2411 ADV-2009-2180  View
250970 49658 CVE-2009-2411 ADV-2009-3184  View
250971 49658 CVE-2009-2411 FEDORA-2009-8432  View
250972 49658 CVE-2009-2411 FEDORA-2009-8449  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41009 JVNDB-2009-002015 Subversion の libsvn_delta ライブラリにおける整数オーバーフローの脆弱性 Subversion の libsvn_delta ライブラリには、大きなウィンドウを持つ svndiff ストリームの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2009-2411 39842 CVE-2009-2411 49658 8.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002015.html 2009-08-07 2009-12-17 View