Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-0398

Fixed in a distro release EPSS 5%

Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.

Published 2004-05-20 · CVE record · OSV

Products: webdav cadaver, webdav neon, debian_linux

Distro releases

ReleasePackageFixed in
Debian 12cadaver0.22.1-3
Debian 13cadaver0.22.1-3
Debian 14cadaver0.22.1-3
Debian 3.0cadaver0.18.0-1woody3
Debian 3.0neon0.19.3-2woody5