Gentoo: GLSA-200407-20 Low Severity: Subversion Access Bypass

Gentoo Linux Security Advisory GLSA 200407-20 https://security.gentoo.org/ Severity: Low Title: Subversion: Vulnerability in mod_authz_svn Date: July 26, 2004 Bugs: #57747 ID: 200407-20

Synopsis ======= Users with write access to parts of a Subversion repository may bypass read restrictions in mod_authz_svn and read any part of the repository they wish.
Background ========= Subversion is an advanced version control system, similar to CVS, which supports additional functionality such as the ability to move, copy and delete files and directories. A Subversion server may be run as an Apache module, a standalone server (svnserve), or on-demand over ssh (a la CVS' ":ext:" protocol). The mod_authz_svn Apache module works with Subversion in Apache to limit access to parts of Subversion repositories based on policy set by the administrator.
Affected packages ================ ----------------...