CVE-2004-0179

Description (CNA)

Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.securityfocus.com/bid/10136
• http://security.gentoo.org/glsa/glsa-200405-04.xml
• http://www.redhat.com/support/errata/RHSA-2004-157.html
• http://marc.info/?l=bugtraq&m=108213873203477&w=2
• http://security.gentoo.org/glsa/glsa-200405-01.xml
• http://www.redhat.com/support/errata/RHSA-2004-160.html
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:032
• http://www.debian.org/security/2004/dsa-487
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1065
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10913
• http://lists.suse.com/archive/suse-security-announce/2004-Apr/0002.html
• http://www.redhat.com/support/errata/RHSA-2004-158.html
• http://www.redhat.com/support/errata/RHSA-2004-159.html
• http://marc.info/?l=bugtraq&m=108214147022626&w=2
• http://secunia.com/advisories/11363
• http://lists.suse.com/archive/suse-security-announce/2004-Apr/0003.html
• https://bugzilla.fedora.us/show_bug.cgi?id=1552
• http://www.osvdb.org/5365

ADP enrichment