Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2004-0397

EPSS 86.59% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2004-0397

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Subversion日期解析函数缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Subversion是一款版本控制系统。 Subversion没有正确检查处理用户提交的请求数据，远程攻击者可以利用这个漏洞对系统进行缓冲区溢出攻击。 当Subversions尝试转换字符串给apr_time_t函数时，会采用sscanf()函数来解码旧格式的日期字符串，由于对参数缺少充分检查，提交超长格式串数据可能触发缓冲区溢出。远程攻击者可以通过DAV2 REPORT查询或get-dated-rev svn-protocol命令来触发，精心构建提交数据可能以进程权限执行任意指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2004-0397

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-0397

Please Login to view more intelligence information

Same Patch Batch · n/a · 2004-05-28 · 6 CVEs total

CVE-2004-0402XPCD xpcd-svga本地缓冲区溢出漏洞
CVE-2004-0485Apple OS X未明终端URL处理漏洞
CVE-2004-0486Apple Mac OS X Help协议远程代码执行漏洞
CVE-2004-0488Apache Mod_SSL SSL_Util_UUEncode_Binary堆栈缓冲区错误漏洞
CVE-2004-0489Mac OS参数注入漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2004-0397

No comments yet

Leave a comment