ByteOS Network

CVE Vulnerability Details :

CVE-2010-3315

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-04 Oct, 2010 | 20:00

Updated At-07 Aug, 2024 | 03:03

▼CVE Numbering Authority (CNA)

authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19007	vdb-entry signature x_refsource_OVAL
http://secunia.com/advisories/41652	third-party-advisory x_refsource_SECUNIA
http://subversion.apache.org/security/CVE-2010-3315-advisory.txt	x_refsource_CONFIRM
http://security-tracker.debian.org/tracker/CVE-2010-3315	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/0264	vdb-entry x_refsource_VUPEN
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html	vendor-advisory x_refsource_APPLE
http://www.debian.org/security/2010/dsa-2118	vendor-advisory x_refsource_DEBIAN
http://secunia.com/advisories/43346	third-party-advisory x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2011-0258.html	vendor-advisory x_refsource_REDHAT
http://www.ubuntu.com/usn/USN-1053-1	vendor-advisory x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html	vendor-advisory x_refsource_SUSE
http://www.mandriva.com/security/advisories?name=MDVSA-2010:199	vendor-advisory x_refsource_MANDRIVA
http://secunia.com/advisories/43139	third-party-advisory x_refsource_SECUNIA
http://support.apple.com/kb/HT4581	x_refsource_CONFIRM

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19007

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://secunia.com/advisories/41652

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://subversion.apache.org/security/CVE-2010-3315-advisory.txt

Resource:

x_refsource_CONFIRM

Hyperlink: http://security-tracker.debian.org/tracker/CVE-2010-3315

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/0264

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.debian.org/security/2010/dsa-2118

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://secunia.com/advisories/43346

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0258.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.ubuntu.com/usn/USN-1053-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:199

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://secunia.com/advisories/43139

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://support.apple.com/kb/HT4581

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19007	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/41652	third-party-advisory x_refsource_SECUNIA x_transferred
http://subversion.apache.org/security/CVE-2010-3315-advisory.txt	x_refsource_CONFIRM x_transferred
http://security-tracker.debian.org/tracker/CVE-2010-3315	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0264	vdb-entry x_refsource_VUPEN x_transferred
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.debian.org/security/2010/dsa-2118	vendor-advisory x_refsource_DEBIAN x_transferred
http://secunia.com/advisories/43346	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.redhat.com/support/errata/RHSA-2011-0258.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.ubuntu.com/usn/USN-1053-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2010:199	vendor-advisory x_refsource_MANDRIVA x_transferred
http://secunia.com/advisories/43139	third-party-advisory x_refsource_SECUNIA x_transferred
http://support.apple.com/kb/HT4581	x_refsource_CONFIRM x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19007

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://secunia.com/advisories/41652

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://subversion.apache.org/security/CVE-2010-3315-advisory.txt

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://security-tracker.debian.org/tracker/CVE-2010-3315

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0264

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.debian.org/security/2010/dsa-2118

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://secunia.com/advisories/43346

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0258.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1053-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:199

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://secunia.com/advisories/43139

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://support.apple.com/kb/HT4581

Resource:

x_refsource_CONFIRM

x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References