{"id":"CVE-2004-0179","aliases":["DEBIAN-CVE-2004-0179","DSA-487","EUVD-2004-0179","GHSA-3265-7c8c-jh75","RHSA-2004:160"],"status":"published","title":"Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that...","description":"Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.11056,"percentile":0.95942,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-134"],"published":"2004-04-16T00:00:00Z","modified":"2026-06-16T22:05:06Z","exploits":[{"source":"exploitdb","id":"EDB-23999","title":"Neon WebDAV Client Library 0.2x - Format String","type":"dos","platform":"linux","date":"2004-04-14","verified":true,"url":"https://www.exploit-db.com/exploits/23999"}],"fixes":[{"ecosystem":"Debian:3.0","package":"neon","fixed_in":["0.19.3-2woody3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"openoffice.org","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"openoffice.org-debuginfo","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"openoffice.org-i18n","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"openoffice.org-libs","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openoffice.org","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openoffice.org-debuginfo","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openoffice.org-i18n","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openoffice.org-libs","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"openoffice.org","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"openoffice.org-debuginfo","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"openoffice.org-i18n","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"openoffice.org-libs","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openoffice.org","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openoffice.org-debuginfo","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openoffice.org-i18n","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openoffice.org-libs","fixed_in":["0:1.1.0-15.EL"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:3.0","package":"neon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.3-2woody3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openoffice.org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openoffice.org-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openoffice.org-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openoffice.org-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openoffice.org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openoffice.org-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openoffice.org-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openoffice.org-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openoffice.org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openoffice.org-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openoffice.org-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openoffice.org-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openoffice.org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openoffice.org-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openoffice.org-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openoffice.org-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-15.EL"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"webdav","product":"neon"}],"references":[{"url":"http://www.securityfocus.com/bid/10136","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-04.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-157.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=108213873203477\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-01.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-160.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:032","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred","Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-487","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1065","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10913","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Third Party Advisory"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2004-Apr/0002.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","tags":["vendor-advisory","x_refsource_SGI","x_transferred","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-158.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-159.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=108214147022626\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11363","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2004-Apr/0003.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1552","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link"]},{"url":"http://www.osvdb.org/5365","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0179","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3265-7c8c-jh75"},{"url":"https://access.redhat.com/errata/RHSA-2004:160","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=119830","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_160.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-0179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617170","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-0179","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2004-0179","description":"Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.","status":"published","published":"2004-04-16T04:00:00Z","modified":"2024-08-08T00:10:03.991Z","updated_at":"2026-11-02T14:34:55.098814Z"}],"euvd":[{"id":"EUVD-2004-0179","description":"Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.","status":"published","published":"2004-04-16T04:00:00Z","modified":"2024-08-08T00:10:03Z","updated_at":"2026-11-03T01:15:20.586153Z"}],"ghsa":[{"id":"GHSA-3265-7c8c-jh75","title":"Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that...","description":"Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.","status":"published","published":"2022-05-03T03:12:58Z","modified":"2023-02-01T05:01:06Z","cwes":["CWE-134"],"updated_at":"2026-11-02T14:49:40.106969Z"}],"nvd":[{"id":"CVE-2004-0179","description":"Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.","status":"published","published":"2004-06-01T04:00:00Z","modified":"2026-06-16T22:05:06.66Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T14:00:49.729639Z"}],"osv":[{"id":"DSA-487","title":"neon - format string","status":"published","published":"2004-04-16T00:00:00Z","modified":"2026-03-09T02:09:09.856834Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"RHSA-2004:160","title":"Red Hat Security Advisory: openoffice.org security update","status":"published","published":"2024-09-15T14:34:06Z","modified":"2025-11-22T10:03:24Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}