NetSight
IP …
high7.1Public exploit code

CVE-2013-2088

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands v…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.

Affected products

VendorProductAffected versions
ApacheSubversion
through 1.6.21
Versions 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4
CollabnetSubversion
Version 1.6.17
OpensuseOpensuse
Version 11.4

Weakness classification

CWE-20

References