CVE-2008-3746

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi
• lists.manyfish.co.uk/pipermail/neon/2008-August/000038.html · Patch
• lists.manyfish.co.uk/pipermail/neon/2008-August/000040.html
• lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
• secunia.com/advisories/31508 · Vendor Advisory
• secunia.com/advisories/31687 · Vendor Advisory
• secunia.com/advisories/32286 · Vendor Advisory
• secunia.com/advisories/36799 · Vendor Advisory
• mandriva.com/security/advisories
• openwall.com/lists/oss-security/2008/08/15/4
• openwall.com/lists/oss-security/2008/08/20/2
• openwall.com/lists/oss-security/2008/08/20/5
• securityfocus.com/bid/30710
• securitytracker.com/id
• ubuntu.com/usn/usn-835-1
• vupen.com/english/advisories/2008/2420 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/44511
• redhat.com/archives/fedora-package-announce/2008-October/msg00367.html · Vendor Advisory

neon のその他の脆弱性

• CVE-2009-2474中 5.8neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name …
• CVE-2009-2473中 4.3neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers…
• CVE-2004-0398高 7.5Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadav…
• CVE-2004-0179中 6.8Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversio…