Neon WebDAV Client Library ne_rfc1036_parse Function Heap Overflow Vulnerability

BID:10385

Info

Neon WebDAV Client Library ne_rfc1036_parse Function Heap Overflow Vulnerability

Bugtraq ID: 10385
Class: Boundary Condition Error
CVE: CVE-2004-0398
Remote: Yes
Local: No
Published: May 19 2004 12:00AM
Updated: Jul 12 2009 05:16AM
Credit: This issue was discovered by Stefan Esser <[email protected]>.
Vulnerable: Subversion Subversion 1.0.1
sitecopy sitecopy 0.13.4
sitecopy sitecopy 0.13.3
Redhat Linux 9.0 i386
Redhat Linux 7.3
OpenOffice OpenOffice 1.1.2
+ Ubuntu Ubuntu Linux 4.1 ppc
 + Ubuntu Ubuntu Linux 4.1 ia64
 + Ubuntu Ubuntu Linux 4.1 ia32
 Neon Client Library 0.24.5
Neon Client Library 0.24.4
Neon Client Library 0.24.3
Neon Client Library 0.24.2
Neon Client Library 0.24.1
Neon Client Library 0.24
Neon Client Library 0.23.8
Neon Client Library 0.23.7
Neon Client Library 0.23.6
Neon Client Library 0.23.5
Neon Client Library 0.23.4
Neon Client Library 0.23.3
Neon Client Library 0.23.2
Neon Client Library 0.23.1
Neon Client Library 0.23
Neon Client Library 0.19.3
- Debian Linux 3.0 sparc
 - Debian Linux 3.0 s/390
 - Debian Linux 3.0 ppc
 - Debian Linux 3.0 mipsel
 - Debian Linux 3.0 mips
 - Debian Linux 3.0 m68k
 - Debian Linux 3.0 ia-64
 - Debian Linux 3.0 ia-32
 - Debian Linux 3.0 hppa
 - Debian Linux 3.0 arm
 - Debian Linux 3.0 alpha
 - Debian Linux 3.0
Mandriva Linux Mandrake 10.0 AMD64
Mandriva Linux Mandrake 10.0
GNU Arch 1.2 pre3
GNU Arch 1.2 pre2
GNU Arch 1.2 pre1
GNU Arch 1.2 pre0
GNU Arch 1.2
GNU Arch 1.1
Gentoo Linux 1.4 _rc3
Gentoo Linux 1.4 _rc2
Gentoo Linux 1.4 _rc1
Gentoo Linux 1.4
Gentoo Linux 1.2
Gentoo Linux 1.1 a
Gentoo Linux 0.7
Gentoo Linux 0.5
Cadaver WebDAV Client 0.22.1
Cadaver WebDAV Client 0.22
+ Redhat Linux 9.0 i386
 Cadaver WebDAV Client 0.21
Cadaver WebDAV Client 0.20.5
Cadaver WebDAV Client 0.20.4
Cadaver WebDAV Client 0.20.3
Cadaver WebDAV Client 0.20.2
Cadaver WebDAV Client 0.20.1
Cadaver WebDAV Client 0.20
Cadaver WebDAV Client 0.18
Not Vulnerable: Neon Client Library 0.24.6

Discussion

Neon WebDAV Client Library ne_rfc1036_parse Function Heap Overflow Vulnerability

Neon WebDAV client library is prone to a heap overflow vulnerability. This issue exists due to improper boundary checks performed on user-supplied data. Reportedly a malformed string value may cause a sscanf() string overflow into static heap variables.

Neon 0.24.5 and prior are prone to this issue.

Exploit / POC

Neon WebDAV Client Library ne_rfc1036_parse Function Heap Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] &lt;mailto:[email protected]&gt;.

Solution / Fix

Neon WebDAV Client Library ne_rfc1036_parse Function Heap Overflow Vulnerability

Solution:
Neon 0.24.6 has been released to address this issue.

Debian has releases an advisory DSA 506-1 to address this issue. Please see the referenced advisory for more information.

Debian has releases an advisory DSA 507-1 to address this issue in cadaver. Please see the referenced advisory for more information.

Red Hat Fedora Linux has released advisories FEDORA-2004-129 and FEDORA-2004-130 dealing with this issue for their Fedora Linux Core. Please see the referenced advisories for more information.

Mandrake Linux has released advisory MDKSA-2004:049 and fixes dealing with this issue. Please see the referenced advisory for more information.

OpenPKG has released advisory OpenPKG-SA-2004.024 and fixes dealing with this issue. Please see the referenced advisory for more information.

Gentoo Linux has released advisories GLSA 200405-13, and GLSA 200405-15 dealing with this issue. Please see the referenced advisories for more information. Users of affected packages are encouraged to run the following commands as superuser:
emerge sync
emerge -pv ">=net-misc/neon-0.24.6"
emerge ">=net-misc/neon-0.24.6"
emerge -pv ">=net-misc/cadaver-0.22.2"
emerge ">=net-misc/cadaver-0.22.2"

Conectiva Linux has released advisory CLA-2004:841 dealing with this issue. Please see the referenced advisory for more information.

Silicon Graphics has released advisory 20040508-01-U and fixes dealing with this and other issues for SGI ProPack 2.4. Please see the referenced advisory for more information.

Gentoo has released an updated advisory (GLSA 200405-25:02) providing fixes for GNU Arch (tla), which includes the vulnerable neon library. Fixes may be applied by the superuser with the following commands:
emerge sync
emerge -pv ">=dev-util/tla-1.2-r2"
emerge ">=dev-util/tla-1.2-r2"

Gentoo has released an advisory (GLSA 200406-03) providing fixes for sitecopy, which includes the vulnerable neon library. Fixes may be applied by the superuser with the following commands:
emerge -pv unmerge net-misc/sitecopy
emerge unmerge net-misc/sitecopy

Mandrake Linux has released advisory MDKSA-2004:078 addressing this issue. Please see the referenced advisory for further information.

The Fedora Legacy project has released advisory FLSA:1552 along with fixes to address this issue for RedHat Linux 7.3 and 9.0. Please see the referenced advisory for further information.


sitecopy sitecopy 0.13.3

sitecopy sitecopy 0.13.4

Cadaver WebDAV Client 0.18

Neon Client Library 0.19.3

Cadaver WebDAV Client 0.22

Cadaver WebDAV Client 0.22.1

Neon Client Library 0.23

Neon Client Library 0.23.1

Neon Client Library 0.23.2

Neon Client Library 0.23.3

Neon Client Library 0.23.4

Neon Client Library 0.23.5

Neon Client Library 0.23.6

Neon Client Library 0.23.7

Neon Client Library 0.23.8

Neon Client Library 0.24

Neon Client Library 0.24.1

Neon Client Library 0.24.2

Neon Client Library 0.24.3

Neon Client Library 0.24.4

Neon Client Library 0.24.5

OpenOffice OpenOffice 1.1.2

References

Neon WebDAV Client Library ne_rfc1036_parse Function Heap Overflow Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report