CVE-2006-1564

    Dashboard / Vulnerabilities / CVE-2006-1564

    CVE-2006-1564

    Published: 31 Mar 2006Last Modified: 10 Apr 2026

    Summary:

    Details: Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the (1) mod_authz_svn.so and (2) mod_dav_svn.so modules, which might allow local users to gain privileges by installing malicious libraries in that directory.

    References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359234, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359234, http://www.securityfocus.com/bid/17288, https://exchange.xforce.ibmcloud.com/vulnerabilities/25680

    Affected packages

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High