Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0179
HistoryJun 01, 2004 - 4:00 a.m.

CVE-2004-0179

2004-06-0104:00:00
CWE-134
[email protected]
web.nvd.nist.gov
1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON

Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.

Affected configurations

NVD
Node
webdavneonRange0.19.0–0.24.5
AND
apacheopenoffice
OR
apachesubversion
OR
webdavcadaver
Node
debiandebian_linuxMatch3.0

References

Related

cve 1
securityvulns 8
openvas 12
freebsd 1
nessus 10
gentoo 3
redhat 2
debian 1
ubuntucve 1
osv 1
cvelist 1
suse 10
cert 1
cve
cve
CVE-2004-0179
2004-06-01 04:00:00
securityvulns
securityvulns
[Full-Disclosure] [OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon)
2004-04-17 00:00:00
[ GLSA 200405-04 ] OpenOffice.org vulnerability when using DAV servers
2004-05-12 00:00:00
void.at - neon format string bugs
2004-04-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200405-01 (neon)
2008-09-24 00:00:00
Debian Security Advisory DSA 487-1 (neon)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200405-04 (openoffice)
2008-09-24 00:00:00
freebsd
freebsd
neon format string vulnerabilities
2004-04-14 00:00:00
nessus
nessus
RHEL 2.1 : cadaver (RHSA-2004:157)
2004-07-06 00:00:00
FreeBSD : neon format string vulnerabilities (84237895-8f39-11d8-8b29-0020ed76ef5a)
2009-04-23 00:00:00
Debian DSA-487-1 : neon - format string
2004-09-29 00:00:00
gentoo
gentoo
Multiple format string vulnerabilities in cadaver
2004-04-19 00:00:00
Multiple format string vulnerabilities in neon 0.24.4 and earlier
2004-05-09 00:00:00
OpenOffice.org vulnerability when using DAV servers
2004-05-11 00:00:00
redhat
redhat
(RHSA-2004:157) cadaver security update
2004-04-14 00:00:00
(RHSA-2004:160) openoffice.org security update
2004-04-14 00:00:00
debian
debian
[SECURITY] [DSA 487-1] New neon packages fix format string vulnerabilities
2004-04-17 01:44:24
ubuntucve
ubuntucve
CVE-2004-0179
2004-06-01 00:00:00
osv
osv
neon - format string
2004-04-16 00:00:00
cvelist
cvelist
CVE-2004-0179
2004-04-16 04:00:00
suse
suse
remote system compromise in subversion
2004-06-17 09:42:39
local denial-of-service attack in kernel
2004-06-16 14:13:55
remote system compromise in squid
2004-06-09 14:47:16
cert
cert
Linux kernel fails to properly handle floating point signals generated by "fsave" and "frstor"
2004-06-15 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON
Related for NVD:CVE-2004-0179
cve1securityvulns8openvas12freebsd1nessus10gentoo3redhat2debian1ubuntucve1osv1cvelist1suse10cert1