CVE-2004-0179 Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers...
MediumCVSS 6.8
EPSS 11.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webdav neon | >= 0.19.0, < 0.24.5 | 0.24.5 |
| debian linux | = 3.0 | No fix listed |
References
- SuSE-SA:2004:009 broken-link vendor-advisory
- SuSE-SA:2004:008 broken-link vendor-advisory
- 20040416 [OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon) issue-tracking mailing-list third-party-advisory
- 20040416 void.at - neon format string bugs issue-tracking mailing-list third-party-advisory
- 11363 third-party-advisory
- GLSA-200405-01 third-party-advisory vendor-advisory
- GLSA-200405-04 third-party-advisory vendor-advisory
- DSA-487 third-party-advisory vendor-advisory
- MDKSA-2004:032 third-party-advisory vendor-advisory
- 5365 broken-link vdb-entry
- RHSA-2004:157 third-party-advisory vendor-advisory
- RHSA-2004:158 third-party-advisory vendor-advisory
- RHSA-2004:159 third-party-advisory vendor-advisory
- RHSA-2004:160 third-party-advisory vendor-advisory
- 10136 third-party-advisory vdb-entry
- FEDORA-2004-1552 broken-link vendor-advisory
- oval:org.mitre.oval:def:1065 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:10913 signature third-party-advisory vdb-entry