CVE-2011-1783

Published: Jun 6, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.

Affected (10)

Products: Apache: Subversion · Canonical: Ubuntu Linux · Debian: Debian Linux · +2 more

Show all products

Apache: Subversion · Canonical: Ubuntu Linux · Debian: Debian Linux · Fedoraproject: Fedora · Apple: Mac Os X

1 product

1 product

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apache Subversion	From 1.5.0 to 1.5.8
Apache Subversion	From 1.6.0 to 1.6.17

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 11.04

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0
Debian Debian Linux	Version 6.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 14
Fedoraproject Fedora	Version 15

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Before 10.7.3

References (38)

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062211.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061913.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/44633

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/44681

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/44849

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/44888

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/45162

Source: secalert@redhat.com

Third Party Advisory

http://subversion.apache.org/security/CVE-2011-1783-advisory.txt

Source: secalert@redhat.com

Vendor Advisory

http://support.apple.com/kb/HT5130

Source: secalert@redhat.com

Third Party Advisory

http://svn.apache.org/repos/asf/subversion/tags/1.6.17/CHANGES

Source: secalert@redhat.com

Release NotesVendor Advisory

http://www.debian.org/security/2011/dsa-2251

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:106

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-0862.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/48091

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1025618

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1144-1

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=709112

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18889

Source: secalert@redhat.com

Third Party Advisory

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html