PT-2013-4932
CVE-2013-4277
·
تاريخ النشر
2013-09-13
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
3.3
منخفضةالمقاييسAV:L/AC:M/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Apache Subversion versions 1.4.0 through 1.7.12
Apache Subversion versions 1.8.0 through 1.8.1
Description
The issue allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option.
Recommendations
For Apache Subversion versions 1.4.0 through 1.7.12, update to a version outside of this range to mitigate the risk.
For Apache Subversion versions 1.8.0 through 1.8.1, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to the
--pid-file option until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾