CVE Feed

    Dashboard / CVE / CVE-2004-1438

    CVE-2004-1438

    The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.

    Published:Dec 31, 2004
    Last Modified:Apr 16, 2026
    EPS:Feb 13, 2005
    EPSS Score:0.00246
    CVSS Score:2.1

    Affected Products

    Vendor
    Subversion
    Product
    Subversion

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2009-2411 (CVSS 8.5) — Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, all…
    CVE-2007-3846 (CVSS 6) — Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly…
    CVE-2007-2448 (CVSS 2.1) — Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have acc…
    CVE-2004-0749 (CVSS 5) — The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on …
    CVE-2004-0413 (CVSS 10) — libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn pro…
    CVE-2004-0397 (CVSS 7.5) — Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remot…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High