National Cyber Awareness System

Vulnerability Summary for CVE-2004-0989

Overview

Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 11526

Type: Advisory; Patch Information; Exploit

Hyperlink:http://www.securityfocus.com/bid/11526

External Source: XF

Name: libxml2-xmlnanoftpscanproxy-bo(17875)

Type: Advisory

Hyperlink:http://xforce.iss.net/xforce/xfdb/17875

External Source: XF

Name: libxml2-xmlnanoftpscanurl-bo(17870)

Type: Advisory

Hyperlink:http://xforce.iss.net/xforce/xfdb/17870

External Source: DEBIAN

Name: DSA-582

Hyperlink:http://www.debian.org/security/2004/dsa-582

External Source: OVAL

Name: oval:org.mitre.oval:def:10505

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10505

External Source: APPLE

Name: APPLE-SA-2005-01-25

Hyperlink:http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html

External Source: XF

Name: libxml2-nanohttp-file-bo(17876)

Hyperlink:http://xforce.iss.net/xforce/xfdb/17876

External Source: XF

Name: libxml2-nanoftp-file-bo(17872)

Hyperlink:http://xforce.iss.net/xforce/xfdb/17872

External Source: REDHAT

Name: RHSA-2004:650

Hyperlink:http://www.redhat.com/support/errata/RHSA-2004-650.html

External Source: REDHAT

Name: RHSA-2004:615

Hyperlink:http://www.redhat.com/support/errata/RHSA-2004-615.html

External Source: OSVDB

Name: 11324

Hyperlink:http://www.osvdb.org/11324

External Source: OSVDB

Name: 11180

Hyperlink:http://www.osvdb.org/11180

External Source: OSVDB

Name: 11179

Hyperlink:http://www.osvdb.org/11179

External Source: SUSE

Name: SUSE-SR:2005:001

Hyperlink:http://www.novell.com/linux/security/advisories/2005_01_sr.html

External Source: GENTOO

Name: GLSA-200411-05

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200411-05.xml

External Source: CIAC

Name: P-029

Hyperlink:http://www.ciac.org/ciac/bulletins/p-029.shtml

External Source: SECTRACK

Name: 1011941

Hyperlink:http://securitytracker.com/id?1011941

External Source: SECUNIA

Name: 13000

Hyperlink:http://secunia.com/advisories/13000

External Source: UBUNTU

Name: USN-89-1

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=110972110516151&w=2

External Source: BUGTRAQ

Name: 20041026 libxml2 remote buffer overflows (not in xml parsing code though)

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=109880813013482&w=2

External Source: CONECTIVA

Name: CLA-2004:890

Hyperlink:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890

US Government Resource: oval:org.mitre.oval:def:1173

Name: oval:org.mitre.oval:def:1173

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1173

References to Check Content

Identifier:oval:org.mitre.oval:def:10505

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10505

Identifier:oval:org.mitre.oval:def:1173

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1173