CVE ID:	CVE-2004-0179
Description:	Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.
Test IDs:	1.3.6.1.4.1.25623.1.0.52451   1.3.6.1.4.1.25623.1.0.54553   1.3.6.1.4.1.25623.1.0.50512   1.3.6.1.4.1.25623.1.0.54564   1.3.6.1.4.1.25623.1.0.54561   1.3.6.1.4.1.25623.1.0.51032   1.3.6.1.4.1.25623.1.0.52787   1.3.6.1.4.1.25623.1.0.53181   1.3.6.1.4.1.25623.1.0.51031
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0179 BugTraq ID: 10136 http://www.securityfocus.com/bid/10136 Bugtraq: 20040416 [OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon) (Google Search) http://marc.info/?l=bugtraq&m=108213873203477&w=2 Bugtraq: 20040416 void.at - neon format string bugs (Google Search) http://marc.info/?l=bugtraq&m=108214147022626&w=2 Debian Security Information: DSA-487 (Google Search) http://www.debian.org/security/2004/dsa-487 https://bugzilla.fedora.us/show_bug.cgi?id=1552 http://security.gentoo.org/glsa/glsa-200405-01.xml http://security.gentoo.org/glsa/glsa-200405-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:032 http://www.osvdb.org/5365 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1065 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10913 RedHat Security Advisories: RHSA-2004:157 http://www.redhat.com/support/errata/RHSA-2004-157.html RedHat Security Advisories: RHSA-2004:158 http://www.redhat.com/support/errata/RHSA-2004-158.html RedHat Security Advisories: RHSA-2004:159 http://www.redhat.com/support/errata/RHSA-2004-159.html RedHat Security Advisories: RHSA-2004:160 http://www.redhat.com/support/errata/RHSA-2004-160.html http://secunia.com/advisories/11363 SGI Security Advisory: 20040404-01-U ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc SuSE Security Announcement: SuSE-SA:2004:008 (Google Search) http://lists.suse.com/archive/suse-security-announce/2004-Apr/0003.html SuSE Security Announcement: SuSE-SA:2004:009 (Google Search) http://lists.suse.com/archive/suse-security-announce/2004-Apr/0002.html