Summary
You are running a version of Subversion which is older than 1.0.8 or 1.1.0-rc4.
A flaw exist in older version, in the apache module mod_authz_svn, which fails to properly restrict access to metadata within unreadable paths.
An attacker can read metadata in unreadable paths, which can contain sensitive information such as logs and paths.
Solution
Upgrade to subversion 1.0.8, 1.1.0-rc4 or newer
Severity
Classification
-
CVE CVE-2004-0749 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities