CVE ID:	CAN-2004-0179
Description:	Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0179 Bugtraq: 20040416 void.at - neon format string bugs (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=108214147022626&w=2 Debian Security Information: DSA-487 (Google Search) http://www.debian.org/security/2004/dsa-487 https://bugzilla.fedora.us/show_bug.cgi?id=1552 RedHat Security Advisories: RHSA-2004:157 http://www.redhat.com/support/errata/RHSA-2004-157.html RedHat Security Advisories: RHSA-2004:158 http://www.redhat.com/support/errata/RHSA-2004-158.html RedHat Security Advisories: RHSA-2004:159 http://www.redhat.com/support/errata/RHSA-2004-159.html RedHat Security Advisories: RHSA-2004:160 http://www.redhat.com/support/errata/RHSA-2004-160.html SGI Security Advisory: 20040404-01-U ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc SuSE Security Announcement: SuSE-SA:2004:008 (Google Search) http://lists.suse.com/archive/suse-security-announce/2004-Apr/0003.html SuSE Security Announcement: SuSE-SA:2004:009 (Google Search) http://lists.suse.com/archive/suse-security-announce/2004-Apr/0002.html Bugtraq: 20040416 [OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon) (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=108213873203477&w=2 http://security.gentoo.org/glsa/glsa-200405-01.xml http://security.gentoo.org/glsa/glsa-200405-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:032 BugTraq ID: 10136 http://www.securityfocus.com/bid/10136 http://www.osvdb.org/5365 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1065 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10913 http://secunia.com/advisories/11363

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: