neon: denial of service [LWN.net]

Package(s):

neon

CVE #(s):

CVE-2008-3746

Created:

October 16, 2008

Updated:

September 22, 2009

Description:

Neon has a denial of service vulnerability. From the Red Hat bug report:

A NULL pointer deference in the Digest authentication support in neon versions 0.28.0 through 0.28.2 inclusive allows a malicious server to crash a client application, resulting in possible denial of service.

Alerts:

Ubuntu	USN-835-1	2009-09-21
Mandriva	MDVSA-2009:074	2009-03-10
Fedora	FEDORA-2008-7661	2008-10-16

(Log in to post comments)