A security issue has been reported in Subversion, which can be exploited by malicious people to bypass certain security restrictions.

The problem exists in the WebDAV module (mod_dav_svn) when performing authorization to scope-limited named repositories and can be exploited to gain access to a restricted portion of a repository.

Successful exploitation requires the "SVNPathAuthz" directive to be set to "short_circuit" (not set by default).

The security issue is reported in versions 1.5.0 through 1.5.7 and 1.6.0 through 1.6.12.

Solution
Update to version 1.5.8 or 1.6.13.

Provided and/or discovered by
The vendor credits Kamesh Jayachandran and C. Michael Pilato.

Original Advisory
http://subversion.apache.org/security/CVE-2010-3315-advisory.txt

Deep Links
Links available to Secunia VIM customers