The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Subversion | Apache | 1.5.0 (including) | 1.5.0 (including) |
| Subversion | Apache | 1.5.1 (including) | 1.5.1 (including) |
| Subversion | Apache | 1.5.2 (including) | 1.5.2 (including) |
| Subversion | Apache | 1.5.3 (including) | 1.5.3 (including) |
| Subversion | Apache | 1.5.4 (including) | 1.5.4 (including) |
| Subversion | Apache | 1.5.5 (including) | 1.5.5 (including) |
| Subversion | Apache | 1.5.6 (including) | 1.5.6 (including) |
| Subversion | Apache | 1.5.7 (including) | 1.5.7 (including) |
| Subversion | Apache | 1.5.8 (including) | 1.5.8 (including) |
| Red Hat Enterprise Linux 5 | RedHat | subversion-0:1.6.11-7.el5_6.4 | * |
| Red Hat Enterprise Linux 6 | RedHat | subversion-0:1.6.11-2.el6_1.4 | * |
| Subversion | Ubuntu | devel | * |
| Subversion | Ubuntu | hardy | * |
| Subversion | Ubuntu | lucid | * |
| Subversion | Ubuntu | maverick | * |
| Subversion | Ubuntu | natty | * |
| Subversion | Ubuntu | upstream | * |