CVE-2004-0398
CVE-2004-0398
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
EPSS 5.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://secunia.com/advisories/11638
- http://secunia.com/advisories/11673
- http://www.osvdb.org/6302
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html
- http://secunia.com/advisories/11650
- http://marc.info/?l=bugtraq&m=108500057108022&w=2
- http://security.gentoo.org/glsa/glsa-200405-13.xml
- http://www.ciac.org/ciac/bulletins/o-148.shtml
- http://security.gentoo.org/glsa/glsa-200405-15.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:049
- http://www.securityfocus.com/bid/10385
- http://www.debian.org/security/2004/dsa-506
- https://bugzilla.fedora.us/show_bug.cgi?id=1552
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16192
- http://www.debian.org/security/2004/dsa-507
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841
- http://marc.info/?l=bugtraq&m=108498433632333&w=2
- http://www.redhat.com/support/errata/RHSA-2004-191.html
- https://nvd.nist.gov/vuln/detail/CVE-2004-0398