CVE-2007-3846

Severity Score

6.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on Windows-based systems, allows remote authenticated users to overwrite and create arbitrary files via a ..\ (dot dot backslash) sequence in the filename, as stored in the file repository.

Vulnerabilidad de salto de directorio en Subversion anterior a 1.4.5, utilizado en TortoiseSVN anterior a 1.4.5 y posiblemente otros productos, cuando se ejecuta en sistemas basados en Windows, permite a usuarios autenticados remotamente sobrescribir y crear archivos de su elección mediante una secuencia ..\ (punto punto barra invertida) en el nombre de archivo, almacenado en el repositorio de archivos.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-07-18 CVE Reserved
2007-08-28 CVE Published
2024-08-07 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (13)

URL	Tag	Source
http://crisp.cs.du.edu/?q=node/36	X_refsource_misc
http://osvdb.org/40118	Vdb Entry
http://osvdb.org/40119	Vdb Entry
http://securitytracker.com/id?1018617	Vdb Entry
http://subversion.tigris.org/servlets/ReadMsg?list=users&msgNo=69413	Mailing List
http://www.securityfocus.com/bid/25468	Vdb Entry
http://www.vupen.com/english/advisories/2007/3003	Vdb Entry
http://www.vupen.com/english/advisories/2007/3004	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36312	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/26625	2017-07-29
http://secunia.com/advisories/26632	2017-07-29
http://subversion.tigris.org/servlets/NewsItemView?newsItemID=1941	2017-07-29
http://tortoisesvn.net/node/291	2017-07-29

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Subversion Search vendor "Subversion"		Subversion Search vendor "Subversion" for product "Subversion"				<= 1.4.4 Search vendor "Subversion" for product "Subversion" and version " <= 1.4.4"		windows		Affected
Tortoisesvn Search vendor "Tortoisesvn"		Tortoisesvn Search vendor "Tortoisesvn" for product "Tortoisesvn"				<= 1.4.4 Search vendor "Tortoisesvn" for product "Tortoisesvn" and version " <= 1.4.4"		windows		Affected