Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0989
HistoryMar 01, 2005 - 5:00 a.m.

CVE-2004-0989

2005-03-0105:00:00
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.134 Low

EPSS

Percentile

95.6%

JSON

Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.

Affected configurations

NVD
Node
xmlsoftlibxmlMatch1.8.17
OR
xmlsoftlibxml2Match2.5.11
OR
xmlsoftlibxml2Match2.6.6
OR
xmlsoftlibxml2Match2.6.7
OR
xmlsoftlibxml2Match2.6.8
OR
xmlsoftlibxml2Match2.6.9
OR
xmlsoftlibxml2Match2.6.11
OR
xmlsoftlibxml2Match2.6.12
OR
xmlsoftlibxml2Match2.6.13
OR
xmlsoftlibxml2Match2.6.14
OR
xmlstarletcommand_line_xml_toolkitMatch0.9.1
Node
redhatfedora_coreMatchcore_2.0
OR
trustixsecure_linuxMatch2.0
OR
trustixsecure_linuxMatch2.1
OR
ubuntuubuntu_linuxMatch4.1ia64
OR
ubuntuubuntu_linuxMatch4.1ppc

References

Related

cve 1
openvas 13
ubuntucve 1
freebsd 1
nessus 13
cvelist 1
gentoo 1
ubuntu 1
osv 1
debian 2
redhat 2
debiancve 1
centos 1
fedora 2
suse 1
cve
cve
CVE-2004-0989
2005-03-01 05:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200411-05 (libxml2)
2008-09-24 00:00:00
Debian: Security Advisory (DSA-582-1)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200411-05 (libxml2)
2008-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2004-0989
2005-03-01 00:00:00
freebsd
freebsd
libxml -- remote buffer overflows
2004-10-26 00:00:00
nessus
nessus
Ubuntu 4.10 : libxml vulnerabilities (USN-89-1)
2006-01-15 00:00:00
Mandrake Linux Security Advisory : libxml/libxml2 (MDKSA-2004:127)
2004-11-05 00:00:00
GLSA-200411-05 : libxml2: Remotely exploitable buffer overflow
2004-11-03 00:00:00
cvelist
cvelist
CVE-2004-0989
2004-10-28 04:00:00
gentoo
gentoo
libxml2: Remotely exploitable buffer overflow
2004-11-02 00:00:00
ubuntu
ubuntu
XML library vulnerabilities
2005-02-28 00:00:00
osv
osv
libxml - buffer overflow
2004-11-02 00:00:00
debian
debian
[SECURITY] [DSA 582-1] New libxml packages fix arbitrary code execution
2004-11-02 17:03:22
[SECURITY] [DSA 582-1] New libxml packages fix arbitrary code execution
2004-11-02 17:03:22
redhat
redhat
(RHSA-2004:615) libxml2 security update
2004-11-12 00:00:00
(RHSA-2004:650) libxml security update
2004-12-16 00:00:00
debiancve
debiancve
CVE-2004-0989
2005-03-01 05:00:00
centos
centos
libxml security update
2005-05-27 13:28:28
fedora
fedora
[SECURITY] Fedora 11 Update: libxml-1.8.17-24.fc11
2009-08-15 08:18:18
[SECURITY] Fedora 10 Update: libxml-1.8.17-24.fc10
2009-08-15 08:20:49
suse
suse
potential remote buffer overflow in samba
2004-11-15 22:07:05

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.134 Low

EPSS

Percentile

95.6%

JSON
Related for NVD:CVE-2004-0989
cve1openvas13ubuntucve1freebsd1nessus13cvelist1gentoo1ubuntu1osv1debian2redhat2debiancve1centos1fedora2suse1