Debian Security Advisory DSA 487-1 (neon)

The remote host is missing an update to neon announced via advisory DSA 487-1. OpenVAS Vulnerability Test $Id: deb4871.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 487-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

libneon array index overflow

Index overflow on URI parsing with non-ASCII characters in 64-bit systems...

GLSA-200406-03 : sitecopy: Multiple vulnerabilities in included libneon

The remote host is affected by the vulnerability described in GLSA-200406-03 sitecopy: Multiple vulnerabilities in included libneon Multiple format string vulnerabilities and a heap overflow vulnerability were discovered in the code of the neon library GLSA 200405-01 and 200405-13. Current versio...

GLSA-200405-01 : Multiple format string vulnerabilities in neon 0.24.4 and earlier

The remote host is affected by the vulnerability described in GLSA-200405-01 Multiple format string vulnerabilities in neon 0.24.4 and earlier There are multiple format string vulnerabilities in libneon which may allow a malicious WebDAV server to execute arbitrary code under the context of the...

GLSA-200405-25 : tla: Multiple vulnerabilities in included libneon

The remote host is affected by the vulnerability described in GLSA-200405-25 tla: Multiple vulnerabilities in included libneon Multiple format string vulnerabilities and a heap overflow vulnerability were discovered in the code of the neon library GLSA 200405-01 and 200405-13. Current versions of...

Mandrake Linux Security Advisory : libneon (MDKSA-2004:032)

A number of various format string vulnerabilities were discovered in the error output handling of Neon, the HTTP and WebDAV client library, by Thomas Wana. These problems affect all versions of Neon from 0.19.0 up to and including 0.24.4. All users are encouraged to upgrade. All client software...

Mandrake Linux Security Advisory : OpenOffice.org (MDKSA-2004:078)

The OpenOffice.org office suite contains an internal libneon library which allows it to connect to WebDAV servers. This internal library is subject to the same vulnerabilities that were fixed in libneon recently. These updated packages contain fixes to libneon to correct the several format string...

Mandrake Linux Security Advisory : libneon (MDKSA-2004:049)

It was discovered that in portions of neon, sscanf is used in an unsafe manner. This will result in an overflow of a static heap variable. The updated packages provide a patched libneon to correct these problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

sitecopy: Multiple vulnerabilities in included libneon

Background sitecopy easily maintains remote websites. It makes it simple to keep a remote site synchronized with the local site with one command. Description Multiple format string vulnerabilities and a heap overflow vulnerability were discovered in the code of the neon library GLSA 200405-01 and...

tla: Multiple vulnerabilities in included libneon

Background GNU Arch tla is a revision control system suited for widely distributed development. Description Multiple format string vulnerabilities and a heap overflow vulnerability were discovered in the code of the neon library GLSA 200405-01 and 200405-13. Current versions of the tla package...

CVE-2004-0398

CVE-2004-0398 concerns the neon library (libneon) up to version 0.24.5 and cadaver prior to 0.22, where a heap-based overflow occurs in the date parsing function ne_rfc1036_parse. This vulnerability can allow a remote WebDAV server to cause arbitrary code execution on the client. The connected do...

neon date parsing vulnerability

Stefan Esser reports: A vulnerability within a libneon date parsing function could cause a heap overflow which could lead to remote code execution, depending on the application using libneon. The vulnerability is in the function nerfc1036parse, which is in turn used by the function nehttpdatepars...

Advisory 06/2004: libneon date parsing vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: libneon date parsing vulnerability Release Date: 2004/05/19 Last Modified: 2004/05/19 Author: Stefan Esser [email protected] Application: libneon = 0.24.5 Severity: A vulnerability...