NetSight
IP …
medium4.0

CVE-2014-3528

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, w…

Impact

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.

Affected products

VendorProductAffected versions
OpensuseOpensuse
Versions 12.3, 13.1
ApacheSubversion
Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
CanonicalUbuntu Linux
Versions 12.04, 14.04
AppleXcode
Version 6.1.1
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Hpc Node
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Eus
Version 6.6.z
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0

Weakness classification

CWE-255

References