Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-0749

Fixed in a distro release EPSS 1%

The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.

Published 2004-11-19 · CVE record · OSV

Products: subversion, gentoo linux

Distro releases

ReleasePackageFixed in
Debian 12subversion1.0.9-2
Debian 13subversion1.0.9-2
Debian 14subversion1.0.9-2