PT-2004-1067 · Libxml2 · Libxml2

Published 2004-03-03 · Updated 2017-10-11 · CVE-2004-0110

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Libxml2 versions 2.6.0 through 2.6.5

Description The issue is related to a buffer overflow in the nanohttp or nanoftp modules, allowing remote attackers to execute arbitrary code via a long URL. This can lead to a disruption of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.

Recommendations For Libxml2 versions 2.6.0 through 2.6.5, update to a version outside of this range to mitigate the risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-06381

BDU:2015-06382

BDU:2015-06390

BDU:2015-06391

BDU:2015-07889

BDU:2015-07890

BDU:2015-07891

CVE-2004-0110

DSA-455

RHSA-2004:090

RHSA-2004:650

Affected Products

Libxml2

References · 32

• 🔥 https://exploit-db.com/exploits/601 · Exploit
• https://bdu.fstec.ru/vul/2015-06381 · Security Note
• https://bdu.fstec.ru/vul/2015-06391 · Security Note
• http://redhat.com/support/errata/RHSA-2004-091.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06382 · Security Note
• http://security.gentoo.org/glsa/glsa-200403-01.xml · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0110 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2004-090.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06390 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0110 · Security Note
• http://redhat.com/support/errata/RHSA-2004-650.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0110 · Vendor Advisory
• http://debian.org/security/2004/dsa-455 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07891 · Security Note
• https://osv.dev/vulnerability/CVE-2004-0110 · Vendor Advisory