CVE-2007-2448
Fixed in a distro release EPSS 2%
Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.
Products: subversion
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | subversion | 1.4.4dfsg1-1 |
| Debian 13 | subversion | 1.4.4dfsg1-1 |
| Debian 14 | subversion | 1.4.4dfsg1-1 |
| Red Hat Enterprise Linux 5 | mod_dav_svn | 0:1.6.11-7.el5 |
| Red Hat Enterprise Linux 5 | subversion | 0:1.6.11-7.el5 |
| Red Hat Enterprise Linux 5 | subversion-debuginfo | 0:1.6.11-7.el5 |
| Red Hat Enterprise Linux 5 | subversion-devel | 0:1.6.11-7.el5 |
| Red Hat Enterprise Linux 5 | subversion-javahl | 0:1.6.11-7.el5 |
| Red Hat Enterprise Linux 5 | subversion-perl | 0:1.6.11-7.el5 |
| Red Hat Enterprise Linux 5 | subversion-ruby | 0:1.6.11-7.el5 |
| openSUSE Tumbleweed | subversion | 1.14.1-1.11 |