svnauthcheck is prone to an overflow condition. This issue is triggered when managing permissions that are generated from template files, which will result in a buffer overflow. This may allow a local attacker to potentially execute arbitrary code or cause a denial of service.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
OSVDB:
Authentication Required
Solution
Upgrade to version 1.0.14 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
