CAN-2005-2101

CVE-2005-2101 concerns the KDE kdeedu suite, where the lange n2kvhtml converter (langen2kvhtml) creates insecure temporary files in /tmp with predictable names. This local-privilege issue allows a non-privileged user to potentially overwrite files, as described in Debian security advisories (DSA-...

CAN-2005-2536

CVE-2005-2536 affects pstotext, which failed to use Ghostscript -dSAFER, allowing remote attackers to exploit malformed PostScript/PDF files to execute arbitrary commands. The issue is documented in Debian DSA-792-1 and OSSC/NASL entries, stating that pstotext did not invoke -dSAFER and that fixe...

CAN-2005-2496

CVE-2005-2496 is an ntp privilege-escalation issue caused when ntpd is run with the -u option using a string to specify the group, causing it to run with the user’s group ID instead of the intended group. Public advisories (RHSA-2006:0393, DSA-801-1, CES A-2006:0393, USN/OSV references) document ...

CAN-2005-2658

CVE-2005-2658 is a buffer overflow in Turquoise SuperStat (turqstat) prior to 2.2.x. Debian advisories describe remote exploitation via a crafted NNTP server that could execute arbitrary code. Public records cite fixed versions per distribution: 2.2.1woody1 (woody), 2.2.2sarge1 (sarge), and 2.2.4...

CAN-2005-2495

The CVE 2005-2495 entry is corroborated by the connected Nessus plugins for Solaris 10, which identify X11/Xsun (X11 6.6.2) as the affected component and enumerate patch-based mitigations. Affected products include Solaris 10 on x86 and SPARC; vulnerable component is Xsun (X11 6.6.2). The underly...

CAN-2005-2494

CVE-2005-2494 is addressed in multiple historical advisories, notably Red Hat RHSA-2006:0582 and CentOS/CESA-2006:0582 for kdebase. The issue is a lock-file handling flaw in kcheckpass that could allow privilege escalation if /var/lock is writable by a user allowed to run kcheckpass. A patch was ...

CAN-2005-2534

Affected software: OpenVPN (Windows and other platforms) with versions prior to 2.0.1. Vulnerabilities tied to CVE-2005-2531 to CVE-2005-2534 involve denial-of-service scenarios due to programming errors in certificate handling, packet decryption, dev tap memory exhaustion, and the --duplicate-cn...

CAN-2005-2962

The CVE-2005-2962 issue affects ntlmaps prior to version 0.9.9. The post-installation script incorrectly sets configuration file permissions to world-readable, allowing local users to obtain the Windows NT username and password used by ntlmaps. Public advisories (e.g., Debian DSA-830-1) document ...

CAN-2005-2498

The connected OpenVAS/Gentoo/SuSE Slackware advisories reference CVE-2005-2498 in multiple contexts (Gentoo GLSA 200508-14 and 200508-18 for tikiwiki/egroupware; SLES9 PHP4 update; Slackware SSA entries). Reported CVSS base 7.5 in these records; no concrete exploit details or vulnerable versions ...

CAN-2005-2660

CVE-2005-2660 affects apachetop (versions 0.12.5 and earlier). The issue arises when apachetop runs in debug mode: it creates a temporary file insecurely in /tmp (atop.debug), which can be targeted by a local attacker via a symlink attack to overwrite arbitrary files with the webserver/user runni...

CAN-2005-3118

CVE-2005-3118 (CAN-2005-3118) affects the Mason firewall configuration tool. The vulnerability is a programming error where Mason does not install the init script to load the firewall on boot, leaving the system without a firewall after reboot. Affected: Mason before 1.0.0; Debian/DSA-845-1 notes...

CAN-2005-2367

This CVE (CAN-2005-2367) is part of a set of issues in Ethereal (network traffic analyser). Connected advisories confirm format-string vulnerabilities in several dissectors could allow remote code execution; other CVEs (2360–2366) primarily describe denial-of-service conditions. Remediation acros...

CAN-2005-2875

The CVE CAN-2005-2875 corresponds to Py2Play, a peer-to-peer game engine, where a design error allows remote code execution by processing untrusted pickled objects. Public advisories (Debian DSA-856-1 and related Debian/Nessus entries) describe that Py2Play can execute arbitrary code received fro...

CAN-2005-2967

CVE-2005-2967 is a format-string vulnerability in the CDDB processing component of the xine-lib library. Across multiple distributions (Debian, Ubuntu, Gentoo, Mandrake/Mandriva, FreeBSD ports, etc.), advisories describe that an attacker can cause arbitrary code execution by pointing a vulnerable...

CAN-2005-2933

CVE-2005-2933 is referenced in multiple advisories (RHSA-2006:0276, RHSA-2006:0501, CESA-2005:850, CESA-2006:0276) and is associated with a buffer overflow in the UW-IMAP c-client library used by IMAP/imapd. A specially crafted mailbox name could allow authenticated attackers to execute arbitrary...

CAN-2005-3121

CVE-2005-3121 affects the module-assistant tool; a rule file before 0.9.10 creates a temporary file insecurely, allowing local users to perform unauthorized operations. Debian notes fixed in 0.9.10 (DSA-867-1) and provides upgrade guidance. Open questions remain about real-world exploitation deta...

CAN-2005-2177

CVE-2005-2177 is associated with net-snmp. The connected advisories state a remote DoS in net-snmp where a specially crafted packet can crash the agent; Red Hat/CentOS notes this under RHSA-2005:395 with a patch update. A related issue, CVE-2005-1740, concerns insecure temporary files that could ...

CVE-2103-2929

CVE-2013-2929 is a Linux kernel flaw in the get_dumpable() function of the ptrace subsystem that could lead to information disclosure on systems where fs.suid_dumpable is set non-default. Debian lists this CVE among many in DSA-2906-1 and notes a fixed package for oldstable (2.6.32-48squeeze5). A...

CVE-2022-435052023

The connected Broadcom advisory references BIOS firmware vulnerabilities on some Intel processors that could permit privilege escalation, information disclosure, or denial of service. Intel’s advisory (INTEL-SA-00813) indicates firmware updates are being released to mitigate these issues. The adv...

CVE-2011-2390

In CVE-2011-2390, Ubuntu describes a misconfiguration in the kdump/mkdumprd OpenSSH integration where the default StrictHostKeyChecking is set to no. This enables a remote attacker controlling a malicious kdump server to impersonate the legitimate server and access security sensitive information ...