Symlink Attack Vulnerability in Svnserve

CVE-2013-4277 · LOW Severity

AV:L/AC:M/AU:N/C:N/I:P/A:P

Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option.

Learn more about our Cis Benchmark Audit For Apache Http Server.