CVE-2004-0179: Medium severity Debian Debian Linux vulnerability
Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0179?
CVE-2004-0179 is considered to have a medium severity rating due to its potential to allow remote code execution.
What products are affected by CVE-2004-0179?
CVE-2004-0179 affects neon 0.24.4 and earlier, including products like Cadaver and certain versions of Apache Subversion.
How do I fix CVE-2004-0179?
To fix CVE-2004-0179, update neon to version 0.24.5 or later and ensure that other affected software is also patched.
Can CVE-2004-0179 be exploited remotely?
Yes, CVE-2004-0179 can be exploited by remote malicious WebDAV servers to execute arbitrary code on vulnerable systems.
Is there a specific version of Debian vulnerable to CVE-2004-0179?
Yes, Debian GNU/Linux version 3.0 is vulnerable to CVE-2004-0179 unless it has been patched or upgraded.