What’s Vulnerable › Vulnerabilities

CVE-2004-0989

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 21.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-03-01 · updated 2026-06-16

Description

Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.

Affected products

• RedHat Fedora Core: core_2.0
• Trustix Secure Linux: 2.0, 2.1
• Ubuntu Linux: 4.1
• xmlsoft Libxml: 1.8.17
• xmlsoft libxml2: 2.5.11, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.11 (+3)
• Xmlstarlet Command Line Xml Toolkit: 0.9.1

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890
• http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html
• http://marc.info/?l=bugtraq&m=109880813013482&w=2
• http://secunia.com/advisories/13000
• http://securitytracker.com/id?1011941
• http://www.ciac.org/ciac/bulletins/p-029.shtml
• http://www.debian.org/security/2004/dsa-582
• http://www.gentoo.org/security/en/glsa/glsa-200411-05.xml
• http://www.novell.com/linux/security/advisories/2005_01_sr.html
• http://www.osvdb.org/11179
• http://www.osvdb.org/11180
• http://www.osvdb.org/11324

Get alerted when CVE-2004-0989 or the next vulnerability affects your stack