Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-0179
HistoryJun 01, 2004 - 4:00 a.m.

CVE-2004-0179

2004-06-0104:00:00
CWE-134
[email protected]
web.nvd.nist.gov
23
cve-2004-0179
format string vulnerability
neon
cadaver
subversion
openoffice
webdav
remote code execution

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON

Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.

Affected configurations

NVD
Node
webdavneonRange0.19.0–0.24.5
AND
apacheopenoffice
OR
apachesubversion
OR
webdavcadaver
Node
debiandebian_linuxMatch3.0
CPENameOperatorVersion
webdav:neonwebdav neonlt0.24.5

References

Related

nessus 10
gentoo 3
redhat 2
nvd 1
openvas 12
securityvulns 8
freebsd 1
debian 1
ubuntucve 1
osv 1
cvelist 1
suse 10
cert 1
nessus
nessus
RHEL 2.1 : cadaver (RHSA-2004:157)
2004-07-06 00:00:00
FreeBSD : neon format string vulnerabilities (84237895-8f39-11d8-8b29-0020ed76ef5a)
2009-04-23 00:00:00
FreeBSD : neon format string vulnerabilities (127)
2004-07-06 00:00:00
gentoo
gentoo
Multiple format string vulnerabilities in cadaver
2004-04-19 00:00:00
Multiple format string vulnerabilities in neon 0.24.4 and earlier
2004-05-09 00:00:00
OpenOffice.org vulnerability when using DAV servers
2004-05-11 00:00:00
redhat
redhat
(RHSA-2004:157) cadaver security update
2004-04-14 00:00:00
(RHSA-2004:160) openoffice.org security update
2004-04-14 00:00:00
nvd
nvd
CVE-2004-0179
2004-06-01 04:00:00
openvas
openvas
Debian Security Advisory DSA 487-1 (neon)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200405-01 (neon)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200405-04 (openoffice)
2008-09-24 00:00:00
securityvulns
securityvulns
[Full-Disclosure] [OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon)
2004-04-17 00:00:00
[ GLSA 200405-04 ] OpenOffice.org vulnerability when using DAV servers
2004-05-12 00:00:00
void.at - neon format string bugs
2004-04-17 00:00:00
freebsd
freebsd
neon format string vulnerabilities
2004-04-14 00:00:00
debian
debian
[SECURITY] [DSA 487-1] New neon packages fix format string vulnerabilities
2004-04-17 01:44:24
ubuntucve
ubuntucve
CVE-2004-0179
2004-06-01 00:00:00
osv
osv
neon - format string
2004-04-16 00:00:00
cvelist
cvelist
CVE-2004-0179
2004-04-16 04:00:00
suse
suse
remote system compromise in subversion
2004-06-17 09:42:39
local denial-of-service attack in kernel
2004-06-16 14:13:55
remote system compromise in squid
2004-06-09 14:47:16
cert
cert
Linux kernel fails to properly handle floating point signals generated by "fsave" and "frstor"
2004-06-15 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON
Related for CVE-2004-0179
nessus10gentoo3redhat2nvd1openvas12securityvulns8freebsd1debian1ubuntucve1osv1cvelist1suse10cert1