CVE-2013-4277

Name of the Vulnerable Software and Affected Versions Apache Subversion versions 1.4.0 through 1.7.12 Apache Subversion versions 1.8.0 through 1.8.1

Description The issue allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option.

Recommendations For Apache Subversion versions 1.4.0 through 1.7.12, update to a version outside of this range to mitigate the risk. For Apache Subversion versions 1.8.0 through 1.8.1, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to the --pid-file option until a patch is available.