vulnwire
10.0crit

CVE-2004-0989in critical feed1 exploit

Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitra…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
21.7%
percentile 98%
Public exploits
1
Exploit-DB

Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.

Exploit prediction (EPSS)

21.69% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-24704 Libxml2 - Multiple Remote Stack Buffer Overflow Vulnerabilities · remote · 2004-10-26

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • lists.apple.com /archives/security-announce/2005/Jan/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • marc.info /?l=bugtraq&m=109880813013482&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • ciac.org /ciac/bulletins/p-029.shtml · third-party-advisory, government-resource, x_refsource_CIAC, x_transferred
  • osvdb.org /11179 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securitytracker.com /id?1011941 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • redhat.com /support/errata/RHSA-2004-615.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /bid/11526 · vdb-entry, x_refsource_BID, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10505 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17872 · vdb-entry, x_refsource_XF, x_transferred
  • redhat.com /support/errata/RHSA-2004-650.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • gentoo.org /security/en/glsa/glsa-200411-05.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • distro.conectiva.com.br /atualizacoes/?id=a&anuncio=000890 · vendor-advisory, x_refsource_CONECTIVA, x_transferred
  • osvdb.org /11324 · vdb-entry, x_refsource_OSVDB, x_transferred
  • novell.com /linux/security/advisories/2005_01_sr.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1173 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • ubuntu.com /usn/usn-89-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • secunia.com /advisories/13000 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2004/dsa-582 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17870 · vdb-entry, x_refsource_XF, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17875 · vdb-entry, x_refsource_XF, x_transferred
  • osvdb.org /11180 · vdb-entry, x_refsource_OSVDB, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17876 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.