CVE-2004-0398: Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.2...

Security readout for executives and security teams

This is an old client-side vulnerability in the neon WebDAV library. A malicious WebDAV server could exploit affected clients using neon 0.24.5 or earlier, including cadaver before 0.22, to run code on the client system. Exposure is most likely on legacy systems with neon/libneon 0.24.5 or earlier, or cadaver before 0.22, that connect to WebDAV servers. Modern managed distributions are less likely affected if patched since 2004. Prioritize remediation where legacy WebDAV clients still exist or connect to external servers. The business risk is code execution on client machines, but evidence for current active exploitation is not provided. Mitigation focus: Inventory systems for neon/libneon 0.24.5 or earlier.; Identify cadaver installations earlier than version 0.22.; Apply vendor or distribution updates referenced by applicable advisories..

Prepared

Jun 30, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.