CAN-2004-1000

CVE-2004-1000 (lintian) concerns the Debian lintian checker: it removes the working directory even if it wasn’t created at program start, enabling a local attacker to delete arbitrary files via a symlink attack. This insecure temporary-directory behavior is the root cause. Remediations are provid...

CAN-2004-1076

CVE-2004-1076 affects the Atari800 emulator. The provided sources describe multiple buffer overflows in the RtConfigLoad function in rt-config.c, affecting versions before 1.3.4, allowing local users to execute arbitrary code via large values in the configuration file. Exploitation details are no...

CAN-2004-0994

CVE-2004-0994 refers to multiple integer overflows in xzgv (0.8 and earlier) in image processing, notably in read_prf.c/read_prf handling, which can lead to remote code execution via crafted images. Related documents (GLSA-200501-09, OpenVAS entries, and NVD) confirm the issue and classify the im...

CAN-2004-0998

CVE-2004-0998 is a format-string vulnerability in telnetd-ssl (netkit-telnet-ssl) affecting 0.17 and earlier. The Debian security advisory and Debian tracker entries describe remote arbitrary-code execution as the impact. Remediation in these sources is to upgrade to fixed packages (e.g., 0.17.17...

CAN-2004-1183

CVE-2004-1183 is a documented integer overflow in the tiffdump utility of libtiff (affecting versions prior to the patch). Several advisories (Ubuntu USN-54-1, Red Hat RHSA-2005:035, Gentoo GLSA-200501-06, SUSE-SA:2005:001, Debian/others) describe that processing carefully crafted TIFF images can...

CAN-2005-0016

CVE-2005-0016 describes a buffer overflow in the exported_display function of xatitv in gatos before 0.0.5, allowing local users to execute arbitrary code. The available sources (NVD/OSV/CVE lists and SUSE/OSVDebian/etc.) confirm the affected component and the local-code-execution impact. The pro...

CAN-2004-1182

HylaFAX contains a vulnerability in hfaxd (CVE-2004-1182) where, if a weak hosts.hfaxd file is used, a remote attacker can authenticate by supplying a crafted username or hostname that matches a regex against the hosts.hfaxd entry without a password. Affected: HylaFAX with weak hosts.hfaxd config...

CAN-2005-0064

CAN-2005-0064 pertains to a buffer overflow in Xpdf code (Decrypt::makeFileKey2) used by Xpdf and GPdf, enabling potential remote arbitrary-code execution via crafted PDF files. Debian’s DSAs/Ubuntu Gentoo Trustix advisories cite a fix in xpdf packages (upgrade to a newer Xpdf version) as the rem...

CAN-2004-1027

CVE-2004-1027 is a directory traversal vulnerability in unarj. The issue arises when extracting ARJ archives with the -x option; specially crafted archives can cause files to be created in the parent directory (…/.. paths) and, when used recursively, may overwrite critical system files. Publicly ...

CAN-2004-1264

CVE-2004-1264 affects the chbg utility. Debian/DSA-644-1 reports a local buffer overflow in chbg (config.c/simplify_path) that could allow arbitrary code execution when processing a crafted scenario file. The issue is exploitable remotely via a malicious configuration, with Debian indicating patc...

CAN-2005-0095

CVE-2005-0095 affects Squid: a vulnerability in the Web Cache Communication Protocol (WCCP) message parsing can trigger a memory access exception, potentially causing a denial-of-service. Exploitation is described as using a specially crafted WCCP I_SEE_YOU message to crash the Squid process. Rem...

CAN-2005-0071

The CVE-2005-0071 entry applies to Video Disk Recorder (VDR) prior to version 1.2.6. The vulnerability is that VDR did not securely create files, allowing a local attacker to overwrite arbitrary files via insecure file handling. Public records (OSV OSV-) summarize: vdr before 1.2.6 does not secur...

CAN-2004-1186

CVE-2004-1186 concerns the enscript utility and is documented across multiple feeds as having multiple issues in the same family: unsanitised input enabling arbitrary commands via EPSF pipe, lack of filename sanitisation leading to command execution, and multiple buffer overflows causing crashes....

CAN-2005-0102

CVE-2005-0102 affects Evolution (GNOME) via a flaw in camel-lock-helper. Connected advisories (Ubuntu USN-69-1, Debian DSA-673-1, Gentoo GLSA 200501-35, CentOS/CESA-2005:397) describe an integer/buffer handling issue in camel-lock-helper that could allow local privilege escalation or code executi...

CAN-2005-0074

CAN-2005-0074 corresponds to a buffer overflow in xpcd’s SVGA viewer pcdsvgaview (part of xpcd). The vulnerability arises from a fixed-size buffer overflow that can allow a local user to execute arbitrary code with elevated privileges. Debian’s DSA-676-1 fixes this by updating xpcd-svga to a patc...

CAN-2005-0159

CVE-2005-0159 affects the Debian toolchain-source package (tpkg-* scripts) where insecure temporary file usage allows a local attacker to overwrite arbitrary files via a symlink attack. The Debian security advisories (DSA-679-1) document that the fix is available in toolchain-source versions 3.0....

CAN-2005-0085

CVE-2005-0085 relates to a cross-site scripting vulnerability in htdig that can be exploited remotely. Public records in connected documents show multiple advisories across distros: Debian: DSA-680-1 and a corresponding Debian security advisory entry for htdig. SUSE: exists as a security update f...

CAN-2005-0100

The connected documents tie CVE-2005-0100 to Emacs across multiple advisories (Debian DSA-671-1, SLES9 Emacs update, Gentoo GLSA 200502-20, FreeBSD ports, Gentoo/Debian entries in OpenVAS). They provide CVSS context (base 7.5, vector AV:N/AC:L/Au:N/C:P/I:P/A:P) in OpenVAS entries, and mention upd...

CAN-2005-0363

CVE-2005-0363 affects AWStats (notably versions AWStats 4.0 and 6.2) where remote attackers can execute arbitrary commands via shell metacharacters in the config parameter, due to inadequate input sanitisation. The issue is a CGI/plugin input handling problem in AWStats, enabling remote command e...

CAN-2005-0070

CVE-2005-0070 affects synaesthesia (2.1 and earlier) where the binary, installed setuid root, does not drop privileges before processing user configuration and mixer files. The underlying issue is local privilege escalation that allows a local user to read arbitrary files. Debian's DSA-681-1 fixe...