Cloudanix VulnDB

CVE-2004-0989

None

CVSS

—

EPSS

21.7%

Published

Mar 1, 2005

CISA due date

—

The record

Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 libxml2 0 2.6.11-5
Debian:12 libxml2 0 2.6.11-5
Debian:13 libxml2 0 2.6.11-5
Debian:3.0 libxml 0 1.8.17-2woody2
Debian:3.0 libxml2 0 2.4.19-4woody2
Red Hat:enterprise_linux:3::as libxml 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::as libxml-debuginfo 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::as libxml-devel 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::as libxml2 0 0:2.5.10-7
Red Hat:enterprise_linux:3::as libxml2-debuginfo 0 0:2.5.10-7
Red Hat:enterprise_linux:3::as libxml2-devel 0 0:2.5.10-7
Red Hat:enterprise_linux:3::as libxml2-python 0 0:2.5.10-7
Red Hat:enterprise_linux:3::desktop libxml 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::desktop libxml-debuginfo 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::desktop libxml-devel 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::desktop libxml2 0 0:2.5.10-7
Red Hat:enterprise_linux:3::desktop libxml2-debuginfo 0 0:2.5.10-7
Red Hat:enterprise_linux:3::desktop libxml2-devel 0 0:2.5.10-7
Red Hat:enterprise_linux:3::desktop libxml2-python 0 0:2.5.10-7
Red Hat:enterprise_linux:3::es libxml 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::es libxml-debuginfo 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::es libxml-devel 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::es libxml2 0 0:2.5.10-7
Red Hat:enterprise_linux:3::es libxml2-debuginfo 0 0:2.5.10-7
Red Hat:enterprise_linux:3::es libxml2-devel 0 0:2.5.10-7
Red Hat:enterprise_linux:3::es libxml2-python 0 0:2.5.10-7
Red Hat:enterprise_linux:3::ws libxml 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::ws libxml-debuginfo 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::ws libxml-devel 0 1:1.8.17-9.2
Red Hat:enterprise_linux:3::ws libxml2 0 0:2.5.10-7
Red Hat:enterprise_linux:3::ws libxml2-debuginfo 0 0:2.5.10-7
Red Hat:enterprise_linux:3::ws libxml2-devel 0 0:2.5.10-7
Red Hat:enterprise_linux:3::ws libxml2-python 0 0:2.5.10-7

Related vulnerabilities