Test ID:	1.3.6.1.4.1.25623.1.1.12.2005.89.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-89-1)
Summary:	The remote host is missing an update for the 'libxml' package(s) announced via the USN-89-1 advisory.
Description:	Summary: The remote host is missing an update for the 'libxml' package(s) announced via the USN-89-1 advisory. Vulnerability Insight: Several buffer overflows have been discovered in libxml's FTP connection and DNS resolution functions. Supplying very long FTP URLs or IP addresses might result in execution of arbitrary code with the privileges of the process using libxml. This does not affect the core XML parsing code, which is what the majority of programs use this library for. Note: The same vulnerability was already fixed for libxml2 in USN-10-1. Affected Software/OS: 'libxml' package(s) on Ubuntu 4.10. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0989 http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html BugTraq ID: 11526 http://www.securityfocus.com/bid/11526 Bugtraq: 20041026 libxml2 remote buffer overflows (not in xml parsing code though) (Google Search) http://marc.info/?l=bugtraq&m=109880813013482&w=2 Computer Incident Advisory Center Bulletin: P-029 http://www.ciac.org/ciac/bulletins/p-029.shtml Conectiva Linux advisory: CLA-2004:890 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890 Debian Security Information: DSA-582 (Google Search) http://www.debian.org/security/2004/dsa-582 http://www.gentoo.org/security/en/glsa/glsa-200411-05.xml http://www.osvdb.org/11179 http://www.osvdb.org/11180 http://www.osvdb.org/11324 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10505 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1173 http://www.redhat.com/support/errata/RHSA-2004-615.html http://www.redhat.com/support/errata/RHSA-2004-650.html http://securitytracker.com/id?1011941 http://secunia.com/advisories/13000 SuSE Security Announcement: SUSE-SR:2005:001 (Google Search) http://www.novell.com/linux/security/advisories/2005_01_sr.html https://www.ubuntu.com/usn/usn-89-1/ XForce ISS Database: libxml2-nanoftp-file-bo(17872) https://exchange.xforce.ibmcloud.com/vulnerabilities/17872 XForce ISS Database: libxml2-nanohttp-file-bo(17876) https://exchange.xforce.ibmcloud.com/vulnerabilities/17876 XForce ISS Database: libxml2-xmlnanoftpscanproxy-bo(17875) https://exchange.xforce.ibmcloud.com/vulnerabilities/17875 XForce ISS Database: libxml2-xmlnanoftpscanurl-bo(17870) https://exchange.xforce.ibmcloud.com/vulnerabilities/17870
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.