Bug 1331686 (CVE-2016-2167) - CVE-2016-2167 subversion: svnserve/sasl may authenticate users using the wrong realm
Summary: CVE-2016-2167 subversion: svnserve/sasl may authenticate users using the wron...
Keywords:
Status: CLOSED WONTFIX
Alias: CVE-2016-2167
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1331687
Blocks: 1331688
TreeView+ depends on / blocked
 
Reported: 2016-04-29 09:18 UTC by Martin Prpič
Modified: 2021-02-17 03:56 UTC (History)
3 users (show)

Fixed In Version: Subversion 1.8.16, Subversion 1.9.4
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-05-11 09:34:48 UTC
Embargoed:

Attachments (Terms of Use)

Description Martin Prpič 2016-04-29 09:18:28 UTC 
It was found that authentication against the Cyrus SASL library would permit a remote user to specify a realm string which is a prefix of the expected realm string. Consequently, a user who has valid credentials to a realm, whose name is a prefix of the repository's realm, would be able to successfully authenticate to the repository.

External References:

https://subversion.apache.org/security/CVE-2016-2167-advisory.txt
Comment 1 Martin Prpič 2016-04-29 09:19:43 UTC 
Created subversion tracking bugs for this issue:

Affects: fedora-all [bug 1331687]
Note You need to log in before you can comment on or make changes to this bug.