PT-2004-3054 · Xmlstarlet · Xmlstarlet Command Line Xml Toolkit

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2159

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XMLStarlet Command Line XML Toolkit version 0.9.3

Description The issue concerns multiple buffer overflows in the XMLStarlet Command Line XML Toolkit, which have unknown impact and attack vectors. The overflows occur via the files xml elem.c and xml select.c.

Recommendations For XMLStarlet Command Line XML Toolkit version 0.9.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-2159

Produtos afetados

Xmlstarlet Command Line Xml Toolkit

Referências · 9

• https://osv.dev/vulnerability/CVE-2004-2159 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17580 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2159 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2004-2159 · Aviso do Fabricante
• http://osvdb.org/10074 · Correção
• http://securityfocus.com/bid/11270 · Correção
• http://securitytracker.com/id?1011496 · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-2159 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=268962 · Correção