CVE-2004-0110
NoneCVSS
—
EPSS
24.2%
Published
Mar 15, 2004
CISA due date
—
The record
Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libxml2 | 0 | 2.6.6-1 |
| Debian:12 | libxml2 | 0 | 2.6.6-1 |
| Debian:13 | libxml2 | 0 | 2.6.6-1 |
| Debian:3.0 | libxml | 0 | 1.8.17-2woody1 |
| Debian:3.0 | libxml2 | 0 | 2.4.19-4woody1 |
| Red Hat:enterprise_linux:3::as | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::as | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::as | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::as | libxml2 | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::as | libxml2-debuginfo | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::as | libxml2-devel | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::as | libxml2-python | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::desktop | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::desktop | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::desktop | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::desktop | libxml2 | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::desktop | libxml2-debuginfo | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::desktop | libxml2-devel | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::desktop | libxml2-python | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::es | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::es | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::es | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::es | libxml2 | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::es | libxml2-debuginfo | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::es | libxml2-devel | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::es | libxml2-python | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::ws | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::ws | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::ws | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::ws | libxml2 | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::ws | libxml2-debuginfo | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::ws | libxml2-devel | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::ws | libxml2-python | 0 | 0:2.5.10-6 |
Related vulnerabilities
- CVE-2017-16932 parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter… Also affects libxml2
- CVE-2017-0663 A remote code execution vulnerability in libxml2 could enable an attacker using a… Also affects libxml2
- CVE-2017-8872 The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to… Also affects libxml2
- CVE-2016-9318 libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does… Also affects libxml2
- CVE-2016-4448 Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified… Also affects libxml2
- CVE-2016-4447 The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows… Also affects libxml2
- CVE-2015-8806 dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer… Also affects libxml2
- CVE-2015-7499 Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3… Also affects libxml2