CVE-2004-0413

CVE-2004-0413 describes a critical heap-based buffer overflow vulnerability in libsvn_ra_svn within Subversion 1.0.4 and OpenPKG distributions. This flaw allows remote attackers to trigger a denial of service or potentially execute arbitrary code by manipulating the length field in svn:// or svn+ssh:// URL strings, leading to excessive memory consumption. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low complexity, and complete compromise potential (confidentiality, integrity, availability). Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.