CVE-2004-0749 Information disclosure in n/a
Remote attackers with low privileges can access sensitive metadata on restricted paths in Subversion via specific commands.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0749?
CVE-2004-0749 is a medium-severity vulnerability in Gentoo Linux, published on 19 Nov 2004. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
Which versions are affected by CVE-2004-0749?
It affects 2 products.
Products include Gentoo Linux, Subversion Subversion.
How do I fix CVE-2004-0749?
Upgrade to a fixed version.
Is CVE-2004-0749 being exploited?
There is no known exploitation of CVE-2004-0749 in the wild and no public exploit code.
Other vulnerabilities in Gentoo Linux
Sources
Also known as DEBIAN-CVE-2004-0749, GHSA-vw75-9wrr-mqqr.