Gentoo GLSA-200405-13 Normal: Neon Heap-Based Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200405-13
                                            https://security.gentoo.org/

  Severity: Normal
     Title: neon heap-based buffer overflow
      Date: May 20, 2004
      Bugs: #51490
        ID: 200405-13


Synopsis
=======
A vulnerability potentially allowing remote execution of arbitrary code
has been discovered in the neon library.

Background
=========
neon provides an HTTP and WebDAV client library.

Affected packages
================
    -------------------------------------------------------------------
     Package        /   Vulnerable   /                      Unaffected
    -------------------------------------------------------------------
  1  net-misc/neon       <= 0.24.5                           >= 0.24.6

==========
Stefan Esser discovered a vulnerability in the code of the neon library
: if a malicious date string is passed to the ne_rfc1036_parse()
function, it can trigger a string overflow in...
Read the Full Advisory