Published: 15/03/2004 Updated: 11/10/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 up to and including 2.6.5 allow remote malicious users to execute arbitrary code via a long URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sgi propack 2.3
xmlsoft libxml2 2.5.4
xmlsoft libxml2 2.6.0
xmlsoft libxml2 2.5.10
xmlsoft libxml2 2.5.11
xmlsoft libxml2 2.6.5
xmlsoft libxml2 2.4.19
xmlsoft libxml2 2.4.23
xmlsoft libxml2 2.6.3
xmlsoft libxml2 2.6.4
sgi propack 2.4
xmlsoft libxml 1.8.17
xmlsoft libxml2 2.6.1
xmlsoft libxml2 2.6.2

Synopsis libxml security update Type/Severity Security Advisory: Moderate Topic An updated libxml package that fixes multiple buffer overflows is nowavailable[Updated 24 May 2005]Multilib packages have been added to this advisory Description The libxml package contains a library for manipu ...

libxml2 is a library for manipulating XML files Yuuichi Teranishi (寺西裕一) discovered a flaw in libxml, the GNOME XML library When fetching a remote resource via FTP or HTTP, the library uses special parsing routines which can overflow a buffer if passed a very long URL If an attacker is able to find an application using libxml1 or libxml ...

/* * libxml 2612 nanoftp bof POC infamous42mdAThotpopDOTcom * * [n00b localho outernet] gcc -Wall libsuxmlc -lxml2 * [n00b localho outernet] /aout * Usage: /aout <retaddr> [ align ] * [n00b localho outernet] netstat -ant | grep 7000 * [n00b localho outernet] /aout 0xbfff0360 * xmlNanoFTPScanURL: Use [IPv6]/IPv4 form ...

NVD-CWE-Other http://rhn.redhat.com/errata/RHSA-2004-090.html http://www.securityfocus.com/bid/9718 http://www.debian.org/security/2004/dsa-455 http://security.gentoo.org/glsa/glsa-200403-01.xml http://www.redhat.com/support/errata/RHSA-2004-091.html http://secunia.com/advisories/10958/http://www.kb.cert.org/vuls/id/493966 http://www.ciac.org/ciac/bulletins/o-086.shtml http://www.xmlsoft.org/news.html http://www.redhat.com/support/errata/RHSA-2004-650.html http://www.novell.com/linux/security/advisories/2005_01_sr.html http://marc.info/?l=bugtraq&m=107851606605420&w=2 http://marc.info/?l=bugtraq&m=107860178228804&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/15302 https://exchange.xforce.ibmcloud.com/vulnerabilities/15301 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A875 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A833 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11626 https://access.redhat.com/errata/RHSA-2004:650 https://nvd.nist.gov https://www.exploit-db.com/exploits/601/https://www.kb.cert.org/vuls/id/493966

CVE-2004-0110

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect