Specially crafted XPath expressions could have allowed attackers to cause a denial of service or possibly have unspecified other impact (CVE-2011-2821 / CVE-2011-2834). This has been fixed.

It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2011-0216)

It was discovered that libxml2 is vulnerable to double-free conditions when parsing certain XML documents. This could allow a remote attacker to cause a denial of service. (CVE-2011-2821, CVE-2011-2834)

It was discovered that libxml2 did not properly detect end of file when parsing certain XML documents. An attacker could exploit this to crash applications linked against libxml2. (CVE-2011-3905)

It was discovered that libxml2 did not properly decode entity references with long names. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
(CVE-2011-3919).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0217 advisory.

    These packages provide the libxml2 library, a development toolbox providing     the implementation of various XML standards, for users of MinGW (Minimalist     GNU for Windows).

    IMPORTANT NOTE: The mingw32 packages in Red Hat Enterprise Linux 6 will no     longer be updated proactively and will be deprecated with the release of     Red Hat Enterprise Linux 6.4. These packages were provided to support other     capabilities in Red Hat Enterprise Linux and were not intended for direct     customer use. Customers are advised to not use these packages with     immediate effect. Future updates to these packages will be at Red Hat's     discretion and these packages may be removed in a future minor release.

    A heap-based buffer overflow flaw was found in the way libxml2 decoded     entity references with long names. A remote attacker could provide a     specially-crafted XML file that, when opened in an application linked     against libxml2, would cause the application to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2011-3919)

    A heap-based buffer underflow flaw was found in the way libxml2 decoded     certain entities. A remote attacker could provide a specially-crafted XML     file that, when opened in an application linked against libxml2, would     cause the application to crash or, potentially, execute arbitrary code with     the privileges of the user running the application. (CVE-2012-5134)

    It was found that the hashing routine used by libxml2 arrays was     susceptible to predictable hash collisions. Sending a specially-crafted     message to an XML service could result in longer processing time, which     could lead to a denial of service. To mitigate this issue, randomization     has been added to the hashing function to reduce the chance of an attacker     successfully causing intentional collisions. (CVE-2012-0841)

    Multiple flaws were found in the way libxml2 parsed certain XPath (XML Path     Language) expressions. If an attacker were able to supply a     specially-crafted XML file to an application using libxml2, as well as an     XPath expression for that application to run against the crafted file, it     could cause the application to crash. (CVE-2010-4008, CVE-2010-4494,     CVE-2011-2821, CVE-2011-2834)

    Two heap-based buffer overflow flaws were found in the way libxml2 decoded     certain XML files. A remote attacker could provide a specially-crafted XML     file that, when opened in an application linked against libxml2, would     cause the application to crash or, potentially, execute arbitrary code with     the privileges of the user running the application. (CVE-2011-0216,     CVE-2011-3102)

    An integer overflow flaw, leading to a heap-based buffer overflow, was     found in the way libxml2 parsed certain XPath expressions. If an attacker     were able to supply a specially-crafted XML file to an application using     libxml2, as well as an XPath expression for that application to run against     the crafted file, it could cause the application to crash or, possibly,     execute arbitrary code. (CVE-2011-1944)

    An out-of-bounds memory read flaw was found in libxml2. A remote attacker     could provide a specially-crafted XML file that, when opened in an     application linked against libxml2, would cause the application to crash.
    (CVE-2011-3905)

    Red Hat would like to thank the Google Security Team for reporting the     CVE-2010-4008 issue. Upstream acknowledges Bui Quang Minh from Bkis as the     original reporter of CVE-2010-4008.

    All users of mingw32-libxml2 are advised to upgrade to these updated     packages, which contain backported patches to correct these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the web server's banner, the version of HP System Management Homepage (SMH) hosted on the remote host is earlier than 7.1.1 and is, therefore, reportedly affected by the following vulnerabilities :

  - The bundled version of the libxml2 library contains     multiple vulnerabilities. (CVE-2011-1944, CVE-2011-2821,     CVE-2011-2834)

  - The bundled version of PHP contains multiple     vulnerabilities. (CVE-2011-3379, CVE-2011-4153,     CVE-2011-4885, CVE-2012-1823, CVE-2012-0057,     CVE-2012-0830)

  - The bundled version of the Apache HTTP Server contains     multiple vulnerabilities. (CVE-2011-3607, CVE-2011-4317,     CVE-2011-4415, CVE-2012-0021, CVE-2012-0031,     CVE-2012-0053)

  - An issue exists in the 'include/iniset.php' script in     the embedded RoundCube Webmail version that could lead     to a denial of service. (CVE-2011-4078)

  - The bundled version of OpenSSL contains multiple     vulnerabilities. (CVE-2011-4108, CVE-2011-4576,     CVE-2011-4577, CVE-2011-4619, CVE-2012-0027,     CVE-2012-1165)

  - The bundled version of curl and libcurl does not     properly consider special characters during extraction     of a pathname from a URL. (CVE-2012-0036)     
  - An off autocomplete attribute does not exist for     unspecified form fields, which makes it easier for     remote attackers to obtain access by leveraging an     unattended workstation. (CVE-2012-2012)

  - An unspecified vulnerability exists that could allow a     remote attacker to cause a denial of service, or     possibly obtain sensitive information or modify data.
    (CVE-2012-2013)

  - An unspecified vulnerability exists related to improper     input validation. (CVE-2012-2014)

  - An unspecified vulnerability allows remote,     unauthenticated users to gain privileges and obtain     sensitive information. (CVE-2012-2015)

  - An unspecified vulnerability allows local users to     obtain sensitive information via unknown vectors.
    (CVE-2012-2016)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
57531	SuSE 11.1 Security Update : libxml2 (SAT Patch Number 5489)	Nessus	SuSE Local Security Checks	2012/1/13	2021/1/19	high
57615	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libxml2 vulnerabilities (USN-1334-1)	Nessus	Ubuntu Local Security Checks	2012/1/20	2019/9/19	high
64391	RHEL 6 : mingw32-libxml2 (RHSA-2013:0217)	Nessus	Red Hat Local Security Checks	2013/2/1	2025/4/15	critical
59851	HP System Management Homepage < 7.1.1 Multiple Vulnerabilities	Nessus	Web Servers	2012/7/5	2022/4/11	critical

检测

插件搜索

high

high

critical

critical