WebDAV neon 0.28.2

CPE Details

WebDAV neon 0.28.2
webdav
neon
0.28.2
2020-05-26
13h02 +00:00
2020-05-26
13h02 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:webdav:neon:0.28.2:*:*:*:*:*:*:*

Informations

Vendor

webdav

Product

neon

Version

0.28.2

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2009-2474 2009-08-21 15h00 +00:00 neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
5.8
CVE-2008-3746 2008-08-27 13h00 +00:00 neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication, Digest domain parameter support, and the parse_domain function.
4.3