Vulnerability Database

299,751

Total vulnerabilities in the database

CVE-2004-0398

Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.

  • Published: Jul 7, 2004
  • Updated: Nov 9, 2025
  • CVE: CVE-2004-0398
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
webdav / neon - 0.24.5.x
webdav / cadaver - 0.22.0
debian / debian_linux 3.0 3.0.x