CVE-2004-0398
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2004-0398
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2004-0398.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2004-0398
- Downstream
- Published
- 2004-07-07T04:00:00Z
- Modified
- 2025-08-09T19:01:27Z
- Summary
- [none]
- Details
-
Heap-based buffer overflow in the nerfc1036parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
- References
-
- http://marc.info/?l=bugtraq&m=108498433632333&w=2
- http://marc.info/?l=bugtraq&m=108500057108022&w=2
- http://secunia.com/advisories/11638
- http://secunia.com/advisories/11650
- http://secunia.com/advisories/11673
- http://security.gentoo.org/glsa/glsa-200405-13.xml
- http://security.gentoo.org/glsa/glsa-200405-15.xml
- http://www.debian.org/security/2004/dsa-506
- http://www.debian.org/security/2004/dsa-507
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:049
- http://www.redhat.com/support/errata/RHSA-2004-191.html
- http://www.securityfocus.com/bid/10385
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16192
- https://bugzilla.fedora.us/show_bug.cgi?id=1552
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841
- http://www.ciac.org/ciac/bulletins/o-148.shtml
- http://www.osvdb.org/6302