CVE-2015-0853

HIGH 8.8CVE-2015-0853 · Published 06/09/2017 · updated 17/06/2026

In short

CVE-2015-0853 is a HIGH (CVSS 8.8) vulnerability affecting svn-workbench (pysvn project).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
svn-workbench pysvn_project	`≤ 1.6.2`	No fix yet

Description

svn-workbench 1.6.2 and earlier on a system with xeyes installed allows local users to execute arbitrary commands by using the "Command Shell" menu item while in the directory trunk/$(xeyes).

References

pysvn.tigris.org/issues/show_bug.cgi · Exploit
openwall.com/lists/oss-security/2015/09/13/3 · Exploit
bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
bugs.launchpad.net/ubuntu/+source/svn-workbench/+bug/1495268 · Issue Tracking
bugzilla.redhat.com/show_bug.cgi · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free