CVE-2004-0749

The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.

• http://fedoranews.org/updates/FEDORA-2004-318.shtml
• http://subversion.tigris.org/security/CAN-2004-0749-advisory.txtPatch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200409-35.xmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/11243Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17472
• http://fedoranews.org/updates/FEDORA-2004-318.shtml
• http://subversion.tigris.org/security/CAN-2004-0749-advisory.txtPatch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200409-35.xmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/11243Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17472

Published

Dec 23, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0743Safari in Mac OS X before 10.3.5, after sending form data us…
• CVE-2004-0744The TCP/IP Networking component in Mac OS X before 10.3.5 al…
• CVE-2004-0745LHA 1.14 and earlier allows attackers to execute arbitrary c…
• CVE-2004-0746Konqueror in KDE 3.2.3 and earlier allows web sites to set c…
• CVE-2004-0747Buffer overflow in Apache 2.0.50 and earlier allows local us…7.8
• CVE-2004-0748mod_ssl in Apache 2.0.50 and earlier allows remote attackers…
• CVE-2004-0750Unknown vulnerability in redhat-config-nfs before 1.0.13, wh…
• CVE-2004-0751The char_buffer_read function in the mod_ssl module for Apac…
• CVE-2004-0752OpenOffice (OOo) 1.1.2 creates predictable directory names w…
• CVE-2004-0753The BMP image processor for (1) gdk-pixbuf before 0.22 and (…
• CVE-2004-0754Integer overflow in Gaim before 0.82 allows remote attackers…
• CVE-2004-0755The FileStore capability in CGI::Session for Ruby before 1.8…