CVE-2004-0110

CVE-2004-0110 describes a buffer overflow vulnerability in the nanohttp and nanoftp modules of XMLSoft Libxml2 versions 2.6.0 through 2.6.5. This flaw allows remote attackers to execute arbitrary code by supplying an excessively long URL, impacting various SGI and XMLSoft products utilizing these library versions. Rated with a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). Its high FAUCET Risk Score of 97/100 further emphasizes its criticality. While not listed on the CISA KEV catalog and lacking Metasploit or Nuclei exploits, an ExploitDB entry (EDB-601) exists for a local buffer overflow in libxml 2.6.12 nanoftp, indicating some exploit development. Despite its age, the vulnerability has minimal community discussion or media coverage.