CVE-2004-0398
Fixed in a distro release EPSS 5%
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
Products: webdav cadaver, webdav neon, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cadaver | 0.22.1-3 |
| Debian 13 | cadaver | 0.22.1-3 |
| Debian 14 | cadaver | 0.22.1-3 |
| Debian 3.0 | cadaver | 0.18.0-1woody3 |
| Debian 3.0 | neon | 0.19.3-2woody5 |