CVE-2004-0398

Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841	Broken Link
http://www.redhat.com/support/errata/RHSA-2004-191.html	Third Party Advisory
http://www.debian.org/security/2004/dsa-506	Third Party Advisory
http://www.debian.org/security/2004/dsa-507	Third Party Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=1552	Broken Link
http://security.gentoo.org/glsa/glsa-200405-13.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200405-15.xml	Third Party Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html	Broken Link
http://www.ciac.org/ciac/bulletins/o-148.shtml	Broken Link
http://www.securityfocus.com/bid/10385	Third Party Advisory VDB Entry
http://www.osvdb.org/6302	Broken Link
http://secunia.com/advisories/11638	Third Party Advisory
http://secunia.com/advisories/11650	Third Party Advisory
http://secunia.com/advisories/11673	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:049	Third Party Advisory
http://marc.info/?l=bugtraq&m=108500057108022&w=2	Third Party Advisory
http://marc.info/?l=bugtraq&m=108498433632333&w=2	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16192	Third Party Advisory VDB Entry

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:webdav:cadaver::::::::
	cpe:2.3:a:webdav:neon::::::::

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*

Information

Published : 2004-07-06 21:00

Updated : 2020-10-09 10:06

NVD link : CVE-2004-0398

Mitre link : CVE-2004-0398

JSON object : View

CWE

CWE-787

Out-of-bounds Write

Advertisement

Products Affected

debian

debian_linux

webdav

cadaver
neon

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841", "name": "CLA-2004:841", "tags": ["Broken Link"], "refsource": "CONECTIVA"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-191.html", "name": "RHSA-2004:191", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.debian.org/security/2004/dsa-506", "name": "DSA-506", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "http://www.debian.org/security/2004/dsa-507", "name": "DSA-507", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "https://bugzilla.fedora.us/show_bug.cgi?id=1552", "name": "FEDORA-2004-1552", "tags": ["Broken Link"], "refsource": "FEDORA"}, {"url": "http://security.gentoo.org/glsa/glsa-200405-13.xml", "name": "GLSA-200405-13", "tags": ["Third Party Advisory"], "refsource": "GENTOO"}, {"url": "http://security.gentoo.org/glsa/glsa-200405-15.xml", "name": "GLSA-200405-15", "tags": ["Third Party Advisory"], "refsource": "GENTOO"}, {"url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html", "name": "20040519 Advisory 06/2004: libneon date parsing vulnerability", "tags": ["Broken Link"], "refsource": "FULLDISC"}, {"url": "http://www.ciac.org/ciac/bulletins/o-148.shtml", "name": "O-148", "tags": ["Broken Link"], "refsource": "CIAC"}, {"url": "http://www.securityfocus.com/bid/10385", "name": "10385", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://www.osvdb.org/6302", "name": "6302", "tags": ["Broken Link"], "refsource": "OSVDB"}, {"url": "http://secunia.com/advisories/11638", "name": "11638", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/11650", "name": "11650", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/11673", "name": "11673", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:049", "name": "MDKSA-2004:049", "tags": ["Third Party Advisory"], "refsource": "MANDRAKE"}, {"url": "http://marc.info/?l=bugtraq&m=108500057108022&w=2", "name": "20040519 [OpenPKG-SA-2004.024] OpenPKG Security Advisory (neon)", "tags": ["Third Party Advisory"], "refsource": "BUGTRAQ"}, {"url": "http://marc.info/?l=bugtraq&m=108498433632333&w=2", "name": "20040519 Advisory 06/2004: libneon date parsing vulnerability", "tags": ["Third Party Advisory"], "refsource": "BUGTRAQ"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16192", "name": "neon-library-nerfc1036parse-bo(16192)", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-787"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-0398", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2004-07-07T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:webdav:cadaver:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "0.22.0"}, {"cpe23Uri": "cpe:2.3:a:webdav:neon:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "0.24.5"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2020-10-09T17:06Z"}