Secunia

Some vulnerabilities have been reported in Subversion, which can be exploited by malicious users and malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to input validation errors in the processing of svndiff streams in the libsvn_delta library. This is related to a vulnerability in the APR library.

For more information:
SA36140

Successful exploitation may allow execution of arbitrary code, but requires commit access to a vulnerable server or that a client uses a malicious server.

The vulnerabilities are reported in 1.5.6 and prior, and 1.6.0 through 1.6.3.

Solution
Update to version 1.5.7 or 1.6.4
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Matt Lewis, Google.

Changelog
Further details available in Customer Area

Original Advisory
http://subversion.apache.org/security/CVE-2009-2411-advisory.txt
http://tortoisesvn.net/node/377

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area