Subversion Pre-Commit-Hook Template Undisclosed Vulnerability

Bugtraq ID:	10428
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	May 27 2004 12:00AM
Updated:	May 27 2004 12:00AM
Credit:	This vulnerability was announced in a Fedora update notification.
Vulnerable:	Subversion Subversion 1.0.3 Subversion Subversion 1.0.2 Subversion Subversion 1.0.1 Subversion Subversion 1.0 Redhat Fedora Core2
Not Vulnerable:

Subversion Pre-Commit-Hook Template Undisclosed Vulnerability

Subversion is reported prone to an undisclosed vulnerability. The issue is reported to present itself due to an insecure implementation of the pre-commit-hook template.

This BID will be updated as soon as further information regarding this vulnerability becomes available.

Subversion Pre-Commit-Hook Template Undisclosed Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Subversion Pre-Commit-Hook Template Undisclosed Vulnerability

Solution:
Red Hat Fedora Linux has released advisory FEDORA-2004-135 dealing with this issue for their Fedora Linux Core 2. Fedora users may obtain this update using the "up2date" utility. Please see the referenced advisory for more information.

Subversion Pre-Commit-Hook Template Undisclosed Vulnerability

References:

• Subversion Homepage (Subversion)