CVE-2008-3746 neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication, Digest domain parameter support, and th...
MediumCVSS 4.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication, Digest domain parameter support, and the parse_domain function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webdav neon | = 0.28.0 | No fix listed |
| webdav neon | = 0.28.1 | No fix listed |
| webdav neon | = 0.28.2 | No fix listed |
| debian/neon27(Debian:12) | < 0.28.2-4 | 0.28.2-4 |
| debian/neon27(Debian:13) | < 0.28.2-4 | 0.28.2-4 |
| debian/neon27(Debian:14) | < 0.28.2-4 | 0.28.2-4 |
References
- bugs.debian.org
- [neon] 20080820 neon: release 0.28.3 (SECURITY) mailing-list patch
- [neon] 20080820 CVE-2008-3746: NULL pointer dereference in Digest domain support mailing-list
- SUSE-SR:2008:017 vendor-advisory
- 31508 third-party-advisory vendor-advisory
- 31687 third-party-advisory vendor-advisory
- 32286 third-party-advisory vendor-advisory
- 36799 third-party-advisory vendor-advisory
- MDVSA-2009:074 vendor-advisory
- [oss-security] 20080815 CVE request for neon mailing-list
- [oss-security] 20080820 Re: CVE request for neon mailing-list
- [oss-security] 20080820 Re: CVE request for neon mailing-list
- 30710 vdb-entry
- 1020725 vdb-entry
- USN-835-1 vendor-advisory
- ADV-2008-2420 vdb-entry vendor-advisory
- neon-digestauthentication-dos(44511) vdb-entry
- FEDORA-2008-7661 vendor-advisory
- Debian Security Tracker CVE-2008-3746 vendor-advisory