Test ID:	1.3.6.1.4.1.25623.1.0.52784
Category:	Fedora Local Security Checks
Title:	Fedora Legacy Security Advisory FLSA-2004:1324
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory FLSA-2004:1324. libxml2 is a library for manipulating XML files. Yuuichi Teranishi discovered a flaw in libxml2 versions prior to 2.6.6. When fetching a remote resource via FTP or HTTP, libxml2 uses special parsing routines. These routines can overflow a buffer if passed a very long URL. If an attacker is able to find an application using libxml2 that parses remote resources and allows them to influence the URL, then this flaw could be used to execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0110 to this issue. All users are advised to upgrade to these updated packages, which contain a backported fix and are not vulnerable to this issue. Fedora Legacy would like to thank Johnny Strom for reporting this issue. Affected platforms: Redhat 7.3 Solution: https://secure1.securityspace.com/smysecure/catid.html?in=FLSA-2004:1324 http://mail.gnome.org/archives/xml/2004-February/msg00070.html Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 9718 Common Vulnerability Exposure (CVE) ID: CVE-2004-0110 http://www.securityfocus.com/bid/9718 Bugtraq: 20040305 [OpenPKG-SA-2004.003] OpenPKG Security Advisory (libxml) (Google Search) http://marc.info/?l=bugtraq&m=107851606605420&w=2 Bugtraq: 20040306 TSLSA-2004-0010 - libxml2 (Google Search) http://marc.info/?l=bugtraq&m=107860178228804&w=2 CERT/CC vulnerability note: VU#493966 http://www.kb.cert.org/vuls/id/493966 Computer Incident Advisory Center Bulletin: O-086 http://www.ciac.org/ciac/bulletins/o-086.shtml Debian Security Information: DSA-455 (Google Search) http://www.debian.org/security/2004/dsa-455 http://security.gentoo.org/glsa/glsa-200403-01.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11626 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A833 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A875 RedHat Security Advisories: RHSA-2004:090 http://rhn.redhat.com/errata/RHSA-2004-090.html http://www.redhat.com/support/errata/RHSA-2004-091.html http://www.redhat.com/support/errata/RHSA-2004-650.html http://secunia.com/advisories/10958/ SuSE Security Announcement: SUSE-SR:2005:001 (Google Search) http://www.novell.com/linux/security/advisories/2005_01_sr.html XForce ISS Database: libxml2-nanoftp-bo(15302) https://exchange.xforce.ibmcloud.com/vulnerabilities/15302 XForce ISS Database: libxml2-nanohttp-bo(15301) https://exchange.xforce.ibmcloud.com/vulnerabilities/15301
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.