CVE-2002-1156

Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled...

CVE-2002-1156

Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled...

CVE-2002-1182

CVE-2002-1182 affects Microsoft IIS 5.0 and 5.1. A remote attacker can trigger a denial of service by sending malformed WebDAV requests that cause IIS to allocate an unusually large amount of memory, potentially crashing the server. The vulnerability is characterized as a memory allocation issue ...

CVE-2002-1156

CVE-2002-1156 affects Apache 2.0.42. The vulnerability allows remote attackers to view the source of a CGI script via a POST to a directory where both WebDAV and CGI are enabled. This yields partial confidentiality impact per the NVD metrics (CVSS v2: AV:N/AC:L/Au:N/C:P/I:N/A:N; base score 5.0). ...

CVE-2002-1182: Undefined Security Weakness

IIS 5.0 and 5.1 allows remote attackers to cause a denial of service crash via malformed WebDAV requests that cause a large amount of memory to be assigned...

CVE-2002-1255: Undefined Security Weakness

Microsoft Outlook 2002 allows remote attackers to cause a denial of service repeated failure via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."...

CVE-2002-1156: Undefined Security Weakness

Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled...

GLSA-200405-25 : tla: Multiple vulnerabilities in included libneon

The remote host is affected by the vulnerability described in GLSA-200405-25 tla: Multiple vulnerabilities in included libneon Multiple format string vulnerabilities and a heap overflow vulnerability were discovered in the code of the neon library GLSA 200405-01 and 200405-13. Current versions of...

GLSA-200406-03 : sitecopy: Multiple vulnerabilities in included libneon

The remote host is affected by the vulnerability described in GLSA-200406-03 sitecopy: Multiple vulnerabilities in included libneon Multiple format string vulnerabilities and a heap overflow vulnerability were discovered in the code of the neon library GLSA 200405-01 and 200405-13. Current versio...

GLSA-200405-13 : neon heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200405-13 neon heap-based buffer overflow Stefan Esser discovered a vulnerability in the code of the neon library : if a malicious date string is passed to the nerfc1036parse function, it can trigger a string overflow into static...

GLSA-200405-15 : cadaver heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200405-15 cadaver heap-based buffer overflow Stefan Esser discovered a vulnerability in the code of the neon library see GLSA 200405-13. This library is also included in cadaver. Impact : When connected to a malicious WebDAV serve...

GLSA-200405-01 : Multiple format string vulnerabilities in neon 0.24.4 and earlier

The remote host is affected by the vulnerability described in GLSA-200405-01 Multiple format string vulnerabilities in neon 0.24.4 and earlier There are multiple format string vulnerabilities in libneon which may allow a malicious WebDAV server to execute arbitrary code under the context of the...

GLSA-200405-04 : OpenOffice.org vulnerability when using DAV servers

The remote host is affected by the vulnerability described in GLSA-200405-04 OpenOffice.org vulnerability when using DAV servers OpenOffice.org includes code from the Neon library in functions related to publication on WebDAV servers. This library is vulnerable to several format string attacks...

WebDAV Enabled

Binary data 1585.prm...

Neon < 0.24.7 WebDAV Client Library Unspecified Vulnerability

Binary data 1781.prm...

Neon < 0.24.6 WebDAV Client Library ne_rfc1036_parse Function Heap Overflow

Binary data 1780.prm...

Neon < 0.24.5 WebDAV Client Library Format String Vulnerabilities (deprecated)

Binary data 1779.prm...

Fedora Core 2 : neon-0.24.5-2.2 (2004-130)

Stefan Esser discovered a flaw in the neon library which allows a heap buffer overflow in a date parsing routine. An attacker could create a malicious WebDAV server in such a way as to allow arbitrary code execution on the client should a user connect to it using a neon-based application which us...

Fedora Core 1 : neon-0.24.5-1 (2004-103)

Multiple format string vulnerabilities in neon 0.24.4 and earlier allow remote malicious WebDAV servers to execute arbitrary code. Updated packages were made available in April 2004 however the original update notification email did not make it to fedora-announce-list at that time. Note that...

CVE-2004-0398

Heap-based buffer overflow in the nerfc1036parse date parsing function for the neon library libneon 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client...