Test ID:	1.3.6.1.4.1.25623.1.0.53274
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-582-1)
Summary:	The remote host is missing an update for the Debian 'libxml, libxml2' package(s) announced via the DSA-582-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'libxml, libxml2' package(s) announced via the DSA-582-1 advisory. Vulnerability Insight: 'infamous41md' discovered several buffer overflows in libxml and libxml2, the XML C parser and toolkits for GNOME. Missing boundary checks could cause several buffers to be overflown, which may cause the client to execute arbitrary code. The following vulnerability matrix lists corrected versions of these libraries: For the stable distribution (woody) these problems have been fixed in version 1.8.17-2woody2 of libxml and in version 2.4.19-4woody2 of libxml2. For the unstable distribution (sid) these problems have been fixed in version 1.8.17-9 of libxml and in version 2.6.11-5 of libxml2. These problems have also been fixed in version 2.6.15-1 of libxml2 in the experimental distribution. We recommend that you upgrade your libxml packages. Affected Software/OS: 'libxml, libxml2' package(s) on Debian 3.0. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0989 http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html BugTraq ID: 11526 http://www.securityfocus.com/bid/11526 Bugtraq: 20041026 libxml2 remote buffer overflows (not in xml parsing code though) (Google Search) http://marc.info/?l=bugtraq&m=109880813013482&w=2 Computer Incident Advisory Center Bulletin: P-029 http://www.ciac.org/ciac/bulletins/p-029.shtml Conectiva Linux advisory: CLA-2004:890 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890 Debian Security Information: DSA-582 (Google Search) http://www.debian.org/security/2004/dsa-582 http://www.gentoo.org/security/en/glsa/glsa-200411-05.xml http://www.osvdb.org/11179 http://www.osvdb.org/11180 http://www.osvdb.org/11324 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10505 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1173 http://www.redhat.com/support/errata/RHSA-2004-615.html http://www.redhat.com/support/errata/RHSA-2004-650.html http://securitytracker.com/id?1011941 http://secunia.com/advisories/13000 SuSE Security Announcement: SUSE-SR:2005:001 (Google Search) http://www.novell.com/linux/security/advisories/2005_01_sr.html https://www.ubuntu.com/usn/usn-89-1/ XForce ISS Database: libxml2-nanoftp-file-bo(17872) https://exchange.xforce.ibmcloud.com/vulnerabilities/17872 XForce ISS Database: libxml2-nanohttp-file-bo(17876) https://exchange.xforce.ibmcloud.com/vulnerabilities/17876 XForce ISS Database: libxml2-xmlnanoftpscanproxy-bo(17875) https://exchange.xforce.ibmcloud.com/vulnerabilities/17875 XForce ISS Database: libxml2-xmlnanoftpscanurl-bo(17870) https://exchange.xforce.ibmcloud.com/vulnerabilities/17870
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.