CVE-2004-0398

2004-07-0700:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.4%

JSON

Heap-based buffer overflow in the ne_rfc1036_parse date parsing function
for the neon library (libneon) 0.24.5 and earlier, as used by cadaver
before 0.22, allows remote WebDAV servers to execute arbitrary code on the
client.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchcadaver< 0.22.2-1.1UNKNOWN
ubuntu6.10noarchcadaver< 0.22.2-1.1UNKNOWN
ubuntu7.04noarchcadaver< 0.22.2-1.1UNKNOWN
ubuntu6.06noarchneon< 0.25.5.dfsg-5UNKNOWN
ubuntu6.10noarchneon< 0.25.5.dfsg-5UNKNOWN
ubuntu7.04noarchneon< 0.25.5.dfsg-5UNKNOWN
ubuntu6.06noarchneon24< 0.24.7.dfsg-3ubuntu1UNKNOWN
ubuntu6.10noarchneon24< 0.24.7.dfsg-3ubuntu1UNKNOWN
ubuntu7.04noarchneon26< 0.26.3-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	cadaver	< 0.22.2-1.1	UNKNOWN
ubuntu	6.10	noarch	cadaver	< 0.22.2-1.1	UNKNOWN
ubuntu	7.04	noarch	cadaver	< 0.22.2-1.1	UNKNOWN
ubuntu	6.06	noarch	neon	< 0.25.5.dfsg-5	UNKNOWN
ubuntu	6.10	noarch	neon	< 0.25.5.dfsg-5	UNKNOWN
ubuntu	7.04	noarch	neon	< 0.25.5.dfsg-5	UNKNOWN
ubuntu	6.06	noarch	neon24	< 0.24.7.dfsg-3ubuntu1	UNKNOWN
ubuntu	6.10	noarch	neon24	< 0.24.7.dfsg-3ubuntu1	UNKNOWN
ubuntu	7.04	noarch	neon26	< 0.26.3-1	UNKNOWN