NVD

Id
8797  
Name
CVE-2011-1921  
Description
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-06-06  
Modified Date
2013-11-02  
Seq
2011-1921  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50680 8797 CVE-2011-1921 APPLE-SA-2012-02-01-1  View
50681 8797 CVE-2011-1921 FEDORA-2011-8341  View
50682 8797 CVE-2011-1921 FEDORA-2011-8352  View
50683 8797 CVE-2011-1921 oval:org.mitre.oval:def:18999  View
50684 8797 CVE-2011-1921 http://subversion.apache.org/security/CVE-2011-1921-advisory.txt  View
50685 8797 CVE-2011-1921 http://support.apple.com/kb/HT5130  View
50686 8797 CVE-2011-1921 http://svn.apache.org/repos/asf/subversion/tags/1.6.17/CHANGES  View
50687 8797 CVE-2011-1921 DSA-2251  View
50688 8797 CVE-2011-1921 MDVSA-2011:106  View
50689 8797 CVE-2011-1921 RHSA-2011:0862  View
50690 8797 CVE-2011-1921 48091  View
50691 8797 CVE-2011-1921 1025619  View
50692 8797 CVE-2011-1921 USN-1144-1  View
50693 8797 CVE-2011-1921 subversion-control-rules-info-disc(67804)  View
50694 8797 CVE-2011-1921 https://bugzilla.redhat.com/show_bug.cgi?id=709114  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31483 JVNDB-2011-001723 Apache Subversion で利用される Apache HTTP Server における重要な情報を取得される脆弱性 Apache Subversion で利用される Apache HTTP Server の mod_dav_svn モジュールは、 SVNPathAuthz short_circuit オプションが無効なとき、過去に公式に読み込み可能であったファイルへのパーミッションを適切に処理しないため、重要な情報を取得される脆弱性が存在します。 CVE-2011-1921 49828 CVE-2011-1921 8797 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001723.html 2011-06-06 2011-07-21 View