CVE-2004-0110

Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.

• http://marc.info/?l=bugtraq&m=107851606605420&w=2
• http://marc.info/?l=bugtraq&m=107860178228804&w=2
• http://rhn.redhat.com/errata/RHSA-2004-090.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/10958/
• http://security.gentoo.org/glsa/glsa-200403-01.xml
• http://www.ciac.org/ciac/bulletins/o-086.shtml
• http://www.debian.org/security/2004/dsa-455
• http://www.kb.cert.org/vuls/id/493966US Government Resource
• http://www.novell.com/linux/security/advisories/2005_01_sr.html
• http://www.redhat.com/support/errata/RHSA-2004-091.html
• http://www.redhat.com/support/errata/RHSA-2004-650.html
• http://www.securityfocus.com/bid/9718Patch, Vendor Advisory
• http://www.xmlsoft.org/news.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15301
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15302
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11626
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A833
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A875
• http://marc.info/?l=bugtraq&m=107851606605420&w=2
• http://marc.info/?l=bugtraq&m=107860178228804&w=2
• http://rhn.redhat.com/errata/RHSA-2004-090.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/10958/
• http://security.gentoo.org/glsa/glsa-200403-01.xml
• http://www.ciac.org/ciac/bulletins/o-086.shtml
• http://www.debian.org/security/2004/dsa-455
• http://www.kb.cert.org/vuls/id/493966US Government Resource
• http://www.novell.com/linux/security/advisories/2005_01_sr.html
• http://www.redhat.com/support/errata/RHSA-2004-091.html
• http://www.redhat.com/support/errata/RHSA-2004-650.html
• http://www.securityfocus.com/bid/9718Patch, Vendor Advisory
• http://www.xmlsoft.org/news.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15301
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15302
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11626
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A833
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A875

Published

Mar 15, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0104Multiple format string vulnerabilities in Metamail 2.7 and e…
• CVE-2004-0105Multiple buffer overflows in Metamail 2.7 and earlier allow …
• CVE-2004-0106Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, …
• CVE-2004-0107The (1) post and (2) trigger scripts in sysstat 4.0.7 and ea…
• CVE-2004-0108The isag utility, which processes sysstat data, allows local…
• CVE-2004-0109Buffer overflow in the ISO9660 file system component for Lin…
• CVE-2004-0111gdk-pixbuf before 0.20 allows attackers to cause a denial of…
• CVE-2004-0112The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and …
• CVE-2004-0113Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 befor…
• CVE-2004-0114The shmat system call in the System V Shared Memory interfac…
• CVE-2004-0115VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 throu…
• CVE-2004-0116An Activation function in the RPCSS Service involved with DC…