Apache Subversion 1.6.x – ‘mod_dav_svn/lock.c’ Remote Denial of Service

  • 作者: anonymous
    日期: 2013-04-05
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/38421/
  • source: https://www.securityfocus.com/bid/58897/info
    
    Apache Subversion is prone to a remote denial-of-service vulnerability.
    
    Attackers can exploit this issue to crash the application, resulting in denial-of-service conditions.
    
    Apache Subversion versions 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 are vulnerable. 
    
    curl -X LOCK --data-binary @lock_body 'http://www.example.com/repo/foo'