CVEvulnerability
CVE-2013-4505
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-12-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-264
Description
The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service (resource consumption) via a relative URL in a REPORT request.
Affected configurations
• apache mod dontdothat
• apache subversion 1.4.0
• apache subversion 1.4.1
• apache subversion 1.4.2
• apache subversion 1.4.3
• apache subversion 1.4.4
• apache subversion 1.4.5
• apache subversion 1.4.6
• apache subversion 1.5.0
• apache subversion 1.5.1
• apache subversion 1.5.2
• apache subversion 1.5.3
• apache subversion 1.5.4
• apache subversion 1.5.5
• apache subversion 1.5.6
• apache subversion 1.5.7
• apache subversion 1.5.8
• apache subversion 1.6.0
• apache subversion 1.6.1
• apache subversion 1.6.2
• apache subversion 1.6.3
• apache subversion 1.6.4
• apache subversion 1.6.5
• apache subversion 1.6.6
• apache subversion 1.6.7
• apache subversion 1.6.8
• apache subversion 1.6.9
• apache subversion 1.6.10
• apache subversion 1.6.11
• apache subversion 1.6.12
• apache subversion 1.6.13
• apache subversion 1.6.14
• apache subversion 1.6.15
• apache subversion 1.6.16
• apache subversion 1.6.17
• apache subversion 1.6.18
• apache subversion 1.6.19
• apache subversion 1.6.20
• apache subversion 1.6.21
• apache subversion 1.6.23
• apache subversion 1.7.0
• apache subversion 1.7.1
• apache subversion 1.7.2
• apache subversion 1.7.3
• apache subversion 1.7.4
• apache subversion 1.7.5
• apache subversion 1.7.6
• apache subversion 1.7.7
• apache subversion 1.7.8
• apache subversion 1.7.9
• apache subversion 1.7.10
• apache subversion 1.7.11
• apache subversion 1.7.12
• apache subversion 1.8.1
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html lists.opensuse.org
- http://osvdb.org/100364 osvdb.org
- http://secunia.com/advisories/55855 Vendor Advisory
- http://subversion.apache.org/security/CVE-2013-4505-advisory.txt Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html lists.opensuse.org
- http://osvdb.org/100364 osvdb.org
- http://secunia.com/advisories/55855 Vendor Advisory
- http://subversion.apache.org/security/CVE-2013-4505-advisory.txt Patch, Vendor Advisory