CVE-2004-0989

Public Exploit

Description

Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 30.69% Top 5%

Vendor Advisory apple.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory gentoo.org Vendor Advisory com.br Vendor Advisory novell.com Vendor Advisory ubuntu.com Vendor Advisory debian.org Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html	vendor advisory
http://marc.info/?l=bugtraq&m=109880813013482&w=2	mailing list
http://www.ciac.org/ciac/bulletins/p-029.shtml	third party advisory government resource
http://www.osvdb.org/11179	vdb entry
http://securitytracker.com/id?1011941	vdb entry
http://www.redhat.com/support/errata/RHSA-2004-615.html	vendor advisory
http://www.securityfocus.com/bid/11526	patch vendor advisory vdb entry exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10505	signature vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17872	vdb entry
http://www.redhat.com/support/errata/RHSA-2004-650.html	vendor advisory
http://www.gentoo.org/security/en/glsa/glsa-200411-05.xml	vendor advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890	vendor advisory
http://www.osvdb.org/11324	vdb entry
http://www.novell.com/linux/security/advisories/2005_01_sr.html	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1173	signature vdb entry
https://www.ubuntu.com/usn/usn-89-1/	vendor advisory
http://secunia.com/advisories/13000	third party advisory
http://www.debian.org/security/2004/dsa-582	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17870	vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17875	vdb entry
http://www.osvdb.org/11180	vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17876	vdb entry

Frequently Asked Questions

What is the severity of CVE-2004-0989?: CVE-2004-0989 has been scored as a critical severity vulnerability.
How to fix CVE-2004-0989?: To fix CVE-2004-0989, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2004-0989 being actively exploited in the wild?: It is possible that CVE-2004-0989 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~31% probability that this vulnerability will be exploited by malicious actors in the next 30 days.