NetSight
IP …
medium4.3

CVE-2011-1783

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit optio…

Impact

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.

Affected products

VendorProductAffected versions
ApacheSubversion
from 1.5.0 through 1.5.8
from 1.6.0 before 1.6.17
CanonicalUbuntu Linux
Versions 10.04, 10.10, 11.04
DebianDebian Linux
Versions 5.0, 6.0
FedoraprojectFedora
Versions 14, 15
AppleMac Os X
before 10.7.3

References