CVE-2008-3746

Mô tả

Tham khảo

• bugs.debian.org/cgi-bin/bugreport.cgi
• lists.manyfish.co.uk/pipermail/neon/2008-August/000038.html · Patch
• lists.manyfish.co.uk/pipermail/neon/2008-August/000040.html
• lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
• secunia.com/advisories/31508 · Vendor Advisory
• secunia.com/advisories/31687 · Vendor Advisory
• secunia.com/advisories/32286 · Vendor Advisory
• secunia.com/advisories/36799 · Vendor Advisory
• mandriva.com/security/advisories
• openwall.com/lists/oss-security/2008/08/15/4
• openwall.com/lists/oss-security/2008/08/20/2
• openwall.com/lists/oss-security/2008/08/20/5
• securityfocus.com/bid/30710

Lỗ hổng khác của neon

• CVE-2009-2474TRUNG BÌNH 5.8neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name …
• CVE-2009-2473TRUNG BÌNH 4.3neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers…
• CVE-2004-0398CAO 7.5Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadav…
• CVE-2004-0179TRUNG BÌNH 6.8Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversio…