CVE-2013-2088

Publication date 31 July 2013

Last updated 24 July 2024

Ubuntu priority

Negligible

Why this priority?

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.

Read the notes from the security team

Status

Package Ubuntu Release Status
subversion 13.04 raring Ignored
12.10 quantal Ignored
12.04 LTS precise Ignored
10.04 LTS lucid Ignored end of life

Notes

jdstrand

per Debian, affected tools not shipped in binary packages