Tortoise SVN latest vulnerable to Windows DLL hijacking
From: Nikhil Mittal <nikhil_uitrgpv_at_yahoo.co.in>
Date: Mon, 30 Aug 2010 22:13:18 +0530 (IST)
Hi There,
TortoiseSVN 1.6.10, Build 19898 ( latest available on tigris.org) is vulnerable to Windows DLL Hijacking vulnerability.
I am able to gain a command shell with current user privileges using metasploit. This is to notify you please. Request your consent to make it public.
Regards,
Nikhil Mittal
------------------------------------------------------
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
|
This is an archived mail posted to the TortoiseSVN Users mailing list.
This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.