Buffer overflow in Webdav Cadaver
CVE-2004-0398
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
Vulnerability class: Buffer Overflow
EPSS: 0.050 (91.4th percentile) — read the EPSS interpretation.
Affected products
- Webdav Cadaver
- Webdav Neon
- Debian Debian_linux — versions 3.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (government-resource, Broken Link, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_MANDRAKE)