CVE:CVE-2014-3528
CNNVD:CNNVD-201408-080
Apache Apache Subversion是美国阿帕奇（Apache）软件基金会的一套开源的版本控制系统。该系统可兼容并发版本系统(CVS)。
Apache Subversion 1.0.0至1.7.17之前1.7.x版本和1.8.10之前1.8.x版本中存在安全漏洞，该漏洞源于程序处理缓存凭证时存在MD5冲突。远程攻击者可利用该漏洞获取证书。
solution:Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1; Upgrade apache subversion to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1.0,1.1.1,1.1.2,1.1.3,1.1.4,1.2.0,1.2.1,1.2.2,1.2.3,1.3.0,1.3.1,1.3.2,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4,1.4.5,1.4.6,1.5.0,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.6.0,1.6.1,1.6.2,1.6.3,1.6.4,1.6.5,1.6.6,1.6.7,1.6.8,1.6.9,1.6.10,1.6.11,1.6.12,1.6.13,1.6.14,1.6.15,1.6.16,1.6.17,1.6.18,1.6.19,1.6.20,1.6.21,1.6.23,1.7.0,1.7.1,1.7.2,1.7.3,1.7.4,1.7.5,1.7.6,1.7.7,1.7.8,1.7.9,1.7.10,1.7.11,1.7.12,1.7.13,1.7.14,1.7.15,1.7.16,1.7.17,1.8.0,1.8.1,1.8.2,1.8.3,1.8.4,1.8.5,1.8.6,1.8.7,1.8.8,1.8.9,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1.0,1.1.1,1.1.2,1.1.3,1.1.4,1.2.0,1.2.1,1.2.2,1.2.3,1.3.0,1.3.1,1.3.2,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4,1.4.5,1.4.6,1.5.0,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.6.0,1.6.1,1.6.2,1.6.3,1.6.4,1.6.5,1.6.6,1.6.7,1.6.8,1.6.9,1.6.10,1.6.11,1.6.12,1.6.13,1.6.14,1.6.15,1.6.16,1.6.17,1.6.18,1.6.19,1.6.20,1.6.21,1.6.23,1.7.0,1.7.1,1.7.2,1.7.3,1.7.4,1.7.5,1.7.6,1.7.7,1.7.8,1.7.9,1.7.10,1.7.11,1.7.12,1.7.13,1.7.14,1.7.15,1.7.16,1.7.17,1.8.0,1.8.1,1.8.2,1.8.3,1.8.4,1.8.5,1.8.6,1.8.7,1.8.8,1.8.9; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,and avoid the version 12.04,14.04; Upgrade apple xcode to a higher version than 6.1.1,and avoid the version 6.1.1; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.6.z,and avoid the version 6.6.z; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0