PT-2004-3054 · Xmlstarlet · Xmlstarlet Command Line Xml Toolkit

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2159

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XMLStarlet Command Line XML Toolkit version 0.9.3

Description The issue concerns multiple buffer overflows in the XMLStarlet Command Line XML Toolkit, which have unknown impact and attack vectors. The overflows occur via the files xml elem.c and xml select.c.

Recommendations For XMLStarlet Command Line XML Toolkit version 0.9.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-2159

Affected Products

Xmlstarlet Command Line Xml Toolkit

References · 9

• https://osv.dev/vulnerability/CVE-2004-2159 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2159 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2004-2159 · Vendor Advisory
• http://osvdb.org/10074 · Patch
• http://securityfocus.com/bid/11270 · Patch
• http://securitytracker.com/id?1011496 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-2159 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=268962 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17580 · Note