Unscored severity · published Mar 1, 2005
CVE-2004-0989
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is…
–
CVSS
21.7%
EPSS
No
On KEV
Description
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
Exploitation
Is it being used?
Exploit prediction (EPSS)21.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Command Line Xml Toolkit · Xmlstarlet
0.9.1 · source: NVD
FC
Fedora Core · Redhat
core_2.0 · source: NVD
LI
Libxml · Xmlsoft
1.8.17 · source: NVD
LI
Libxml2 · Xmlsoft
2.5.11; 2.6.6; 2.6.7; 2.6.8; 2.6.9; 2.6.11; +3 more · source: NVD
SL
Secure Linux · Trustix
2.0; 2.1 · source: NVD
UL
Ubuntu Linux · Ubuntu
4.1; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0989
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0989
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890
lists.apple.com
http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html
marc.info
http://marc.info/?l=bugtraq&m=109880813013482&w=2
secunia.com
http://secunia.com/advisories/13000
securitytracker.com
http://securitytracker.com/id?1011941
www.ciac.org
http://www.ciac.org/ciac/bulletins/p-029.shtml
More from Fedora Core
5.6
CVE-2005-0109
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…
–
CVE-2007-6131
buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files
–
CVE-2007-2874
Buffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 allows user-assisted remote attackers to…
–
CVE-2007-2030
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked
–
CVE-2007-1352
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the…