CVE-2004-1438
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated...
CVE-2004-1438 is a low vulnerability (CVSS 2.1) in Subversion, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. Fixed in subversion 1.0.6-1.
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
Exploit likelihood
What each source reports
NVD Score used
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
- Record
CVE-2004-1438- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
- Record
CVE-2004-1438- Updated
- 2026-11-02
EUVDEUVD-2004-1435 No score
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
- Record
EUVD-2004-1435- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w39v-wcwg-3989 No score
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated...
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
- Record
GHSA-w39v-wcwg-3989- Updated
- 2026-11-02
OSV No score
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
- Record
CVE-2004-1438- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-1438 No score
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
- Record
DEBIAN-CVE-2004-1438- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
subversionDebian:12 |
before 1.0.6-1 | 1.0.6-1 |
subversionDebian:13 |
before 1.0.6-1 | 1.0.6-1 |
subversionDebian:14 |
before 1.0.6-1 | 1.0.6-1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/10800
gentoo.org/security/en/glsa/glsa-200407-20.xml
svn.collab.net/repos/svn/tags/1.0.6/CHANGES
securitytracker.com/id?1010779
exchange.xforce.ibmcloud.com/vulnerabilities/16803
securityreason.com/securityalert/60
nvd.nist.gov/vuln/detail/CVE-2004-1438
github.com/advisories/GHSA-w39v-wcwg-3989
security-tracker.debian.org/tracker/CVE-2004-1438