CVEvulnerability
CVE-2004-0398
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-07-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
Affected configurations
• webdav cadaver (< 0.22.0)
• webdav neon (<= 0.24.5)
• debian debian linux 3.0
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html Broken Link
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841 Broken Link
- http://marc.info/?l=bugtraq&m=108498433632333&w=2 Third Party Advisory
- http://marc.info/?l=bugtraq&m=108500057108022&w=2 Third Party Advisory
- http://secunia.com/advisories/11638 Third Party Advisory
- http://secunia.com/advisories/11650 Third Party Advisory
- http://secunia.com/advisories/11673 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200405-13.xml Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200405-15.xml Third Party Advisory
- http://www.ciac.org/ciac/bulletins/o-148.shtml Broken Link
- http://www.debian.org/security/2004/dsa-506 Third Party Advisory
- http://www.debian.org/security/2004/dsa-507 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:049 Third Party Advisory
- http://www.osvdb.org/6302 Broken Link
- http://www.redhat.com/support/errata/RHSA-2004-191.html Third Party Advisory
- http://www.securityfocus.com/bid/10385 Third Party Advisory, VDB Entry
- https://bugzilla.fedora.us/show_bug.cgi?id=1552 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16192 Third Party Advisory, VDB Entry
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html Broken Link
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841 Broken Link
- http://marc.info/?l=bugtraq&m=108498433632333&w=2 Third Party Advisory
- http://marc.info/?l=bugtraq&m=108500057108022&w=2 Third Party Advisory
- http://secunia.com/advisories/11638 Third Party Advisory
- http://secunia.com/advisories/11650 Third Party Advisory
- http://secunia.com/advisories/11673 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200405-13.xml Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200405-15.xml Third Party Advisory
- http://www.ciac.org/ciac/bulletins/o-148.shtml Broken Link
- http://www.debian.org/security/2004/dsa-506 Third Party Advisory
- http://www.debian.org/security/2004/dsa-507 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:049 Third Party Advisory
- http://www.osvdb.org/6302 Broken Link
- http://www.redhat.com/support/errata/RHSA-2004-191.html Third Party Advisory
- http://www.securityfocus.com/bid/10385 Third Party Advisory, VDB Entry
- https://bugzilla.fedora.us/show_bug.cgi?id=1552 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16192 Third Party Advisory, VDB Entry