Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-0989. PoCs published by Sean.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in libxml2's URI parsing functionality (CVE-2004-0989). It crafts a malicious URI with NOP sleds and shellcode to achieve remote code execution via the xmlNanoFTPNewCtxt function.
Description
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
Exploits (1)
This exploit targets a stack-based buffer overflow in libxml2's URI parsing functionality (CVE-2004-0989). It crafts a malicious URI with NOP sleds and shellcode to achieve remote code execution via the xmlNanoFTPNewCtxt function.