CVE-2004-0110
NoneCVSS
—
EPSS
24.2%
Published
Mar 15, 2004
CISA due date
—
The record
Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libxml2 | 0 | 2.6.6-1 |
| Debian:12 | libxml2 | 0 | 2.6.6-1 |
| Debian:13 | libxml2 | 0 | 2.6.6-1 |
| Debian:3.0 | libxml | 0 | 1.8.17-2woody1 |
| Debian:3.0 | libxml2 | 0 | 2.4.19-4woody1 |
| Red Hat:enterprise_linux:3::as | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::as | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::as | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::as | libxml2 | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::as | libxml2-debuginfo | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::as | libxml2-devel | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::as | libxml2-python | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::desktop | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::desktop | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::desktop | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::desktop | libxml2 | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::desktop | libxml2-debuginfo | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::desktop | libxml2-devel | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::desktop | libxml2-python | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::es | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::es | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::es | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::es | libxml2 | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::es | libxml2-debuginfo | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::es | libxml2-devel | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::es | libxml2-python | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::ws | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::ws | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::ws | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::ws | libxml2 | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::ws | libxml2-debuginfo | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::ws | libxml2-devel | 0 | 0:2.5.10-6 |
| Red Hat:enterprise_linux:3::ws | libxml2-python | 0 | 0:2.5.10-6 |
Related vulnerabilities
- CVE-2016-4447 The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows… Also affects libxml2
- CVE-2011-1944 Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and… Also affects libxml2
- CVE-2008-3529 Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2… Also affects libxml2
- CVE-2004-0989 Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other… Also affects libxml2