CVE-2004-0989
NoneCVSS
—
EPSS
21.7%
Published
Mar 1, 2005
CISA due date
—
The record
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libxml2 | 0 | 2.6.11-5 |
| Debian:12 | libxml2 | 0 | 2.6.11-5 |
| Debian:13 | libxml2 | 0 | 2.6.11-5 |
| Debian:3.0 | libxml | 0 | 1.8.17-2woody2 |
| Debian:3.0 | libxml2 | 0 | 2.4.19-4woody2 |
| Red Hat:enterprise_linux:3::as | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::as | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::as | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::as | libxml2 | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::as | libxml2-debuginfo | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::as | libxml2-devel | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::as | libxml2-python | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::desktop | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::desktop | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::desktop | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::desktop | libxml2 | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::desktop | libxml2-debuginfo | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::desktop | libxml2-devel | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::desktop | libxml2-python | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::es | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::es | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::es | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::es | libxml2 | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::es | libxml2-debuginfo | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::es | libxml2-devel | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::es | libxml2-python | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::ws | libxml | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::ws | libxml-debuginfo | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::ws | libxml-devel | 0 | 1:1.8.17-9.2 |
| Red Hat:enterprise_linux:3::ws | libxml2 | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::ws | libxml2-debuginfo | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::ws | libxml2-devel | 0 | 0:2.5.10-7 |
| Red Hat:enterprise_linux:3::ws | libxml2-python | 0 | 0:2.5.10-7 |
Related vulnerabilities
- CVE-2017-16932 parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter… Also affects libxml2
- CVE-2017-0663 A remote code execution vulnerability in libxml2 could enable an attacker using a… Also affects libxml2
- CVE-2017-8872 The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to… Also affects libxml2
- CVE-2016-9318 libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does… Also affects libxml2
- CVE-2016-4448 Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified… Also affects libxml2
- CVE-2016-4447 The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows… Also affects libxml2
- CVE-2015-8806 dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer… Also affects libxml2
- CVE-2015-7499 Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3… Also affects libxml2