Detections
Analytics
Apache Subversion 1.4.x - 1.7.13 / 1.8.x < 1.8.5 Multiple DoS
low Nessus Plugin ID 71569
Language:
Synopsis
The remote host has an application that is affected by multiple denial of service vulnerabilities.Description
The installed version of Subversion Server is affected by multiple denial of service vulnerabilities :- An error exists related to the 'mod_dontdothat' module and handling relative URLs sent from serf-based clients. (CVE-2013-4505)
- An error exists related to the 'mod_dav_svn' module and handling unspecified requests. Note that this issue reportedly only affects the 1.7 and 1.8 branches, including versions 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4. (CVE-2013-4558)
Solution
Upgrade to Subversion Server 1.7.14 / 1.8.5 or later or apply the vendor patches or workarounds.See Also
http://subversion.apache.org/security/CVE-2013-4505-advisory.txt
http://subversion.apache.org/security/CVE-2013-4558-advisory.txt
Plugin Details
Severity: Low
ID: 71569
File Name: subversion_1_8_5.nasl
Version: 1.4
Type: local
Agent: windows
Family: Windows
Published: 12/20/2013
Updated: 7/30/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Low
Base Score: 3.5
Temporal Score: 2.6
Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/a:apache:subversion
Required KB Items: Settings/ParanoidReport, installed_sw/Subversion Server
Exploit Ease: No known exploits are available
Patch Publication Date: 11/25/2013
Vulnerability Publication Date: 11/25/2013
Reference Information
CVE: CVE-2013-4505, CVE-2013-4558