Detections
Analytics

CVE-2004-0398

critical

Description

Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16192

http://www.securityfocus.com/bid/10385

http://www.redhat.com/support/errata/RHSA-2004-191.html

http://www.mandriva.com/security/advisories?name=MDKSA-2004:049

http://www.debian.org/security/2004/dsa-507

http://www.debian.org/security/2004/dsa-506

http://security.gentoo.org/glsa/glsa-200405-15.xml

http://security.gentoo.org/glsa/glsa-200405-13.xml

http://secunia.com/advisories/11673

http://secunia.com/advisories/11650

http://secunia.com/advisories/11638

http://marc.info/?l=bugtraq&m=108500057108022&w=2

http://marc.info/?l=bugtraq&m=108498433632333&w=2

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-0398

https://bugzilla.fedora.us/show_bug.cgi?id=1552

http://www.osvdb.org/6302

http://www.ciac.org/ciac/bulletins/o-148.shtml

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841

http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html

Details

Source: Mitre, NVD

Published: 2004-07-07

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.05015