PT-2008-5105 · Neon · Neon

Joe Orton · Publicado 2008-08-27 · Atualizado 2024-06-15 · CVE-2008-3746

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions neon versions 0.28.0 through 0.28.2

Description The issue allows remote servers to cause a denial of service, resulting in a NULL pointer dereference and crash. This is related to Digest authentication, specifically the Digest domain parameter support, and the parse domain function.

Recommendations For versions 0.28.0 through 0.28.2, consider disabling Digest authentication as a temporary workaround until a patch is available. Restrict access to the parse domain function to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2008-3746

OPENSUSE-SU-2024:11080-1

Produtos afetados

Neon

Referências · 26

• http://secunia.com/advisories/31687 · Aviso do Fabricante
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476571 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2009:074 · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00367.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2008/08/20/2 · Nota
• http://securityfocus.com/bid/30710 · Nota
• https://osv.dev/vulnerability/CVE-2008-3746 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2008-3746 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3746 · Nota
• http://secunia.com/advisories/31508 · Aviso do Fabricante
• http://securitytracker.com/id?1020725 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3746 · Nota de Segurança
• http://lists.manyfish.co.uk/pipermail/neon/2008-August/000040.html · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11080-1 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-835-1 · Aviso do Fabricante