CAN-2005-0064

CAN-2005-0064 pertains to a buffer overflow in Xpdf code (Decrypt::makeFileKey2) used by Xpdf and GPdf, enabling potential remote arbitrary-code execution via crafted PDF files. Debian’s DSAs/Ubuntu Gentoo Trustix advisories cite a fix in xpdf packages (upgrade to a newer Xpdf version) as the rem...

CAN-2005-0159

CVE-2005-0159 affects the Debian toolchain-source package (tpkg-* scripts) where insecure temporary file usage allows a local attacker to overwrite arbitrary files via a symlink attack. The Debian security advisories (DSA-679-1) document that the fix is available in toolchain-source versions 3.0....

CAN-2005-0205

CVE-2005-0205 is a local privilege issue in KDE’s kppp component within the kdenetwork package. The vulnerability stems from a design flaw where kppp leaks privileged file descriptors before exec, allowing a local attacker to read/write privileged descriptors and subsequently modify /etc/hosts or...

CAN-2005-0073

CVE-2005-0073: A buffer overflow in queue.c in sympa 3.3.3 (when running setuid) can allow a local user to execute arbitrary code. Public references describe this as a local privilege escalation vulnerability in Sympa; affected releases include sympa prior to 4.1.3. Mitigation in the cited OpenVA...

CAN-2005-0953

CVE-2005-0953 concerns a race-condition in the bzip2 compressor/decompressor (v1.0.2 and earlier). During decompression in a directory the attacker could manipulate permissions of an unrelated file the user has access to, enabling local privilege modification. A related issue, CVE-2005-1260, desc...

CAN-2005-1858

This CVE affects FUSE (filesystem in userspace): FUSE 2.x before 2.3.0 fails to clear memory from unfilled pages after a read returns a short byte count, potentially allowing local users to disclose sensitive information. The Debian advisory (DSA-744-1) links CVE-2005-1858 to fuse and notes a fix...

CAN-2005-1852

CAN-2005-1852 is an integer overflow in libgadu (Gadu library) that affects Kopete/Kdenetwork and ekg-related components. A remote attacker could send specially crafted Gadu-Gadu messages to trigger the overflow, potentially crashing the involved application or executing arbitrary code. Public ad...

CAN-2005-1937

CVE-2005-1937 appears across multiple advisories tied to Mozilla/Firefox components. Connected documents show CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and references in Ubuntu USN-149-1, Debian DSA-810-1, Gentoo GLSA 200507-24, FreeBSD ports Firefox advisories. Affected products include Firefox...

CAN-2005-1636

CVE-2005-1636 is a MySQL vulnerability describing an insecure temporary file handling bug in the mysql_install_db script that could allow a local user to execute arbitrary SQL commands during installation. Public advisories (RHSA-2005:685, DSA-783-1, CentOS CES A-2005:685, MDKSA-2006:045) cite up...

CAN-2005-2641

The CAN-2005-2641 entry corresponds to a pam_ldap authentication bypass vulnerability. The connected documents confirm: the pam_ldap module before version 180 does not properly handle a new PasswordPolicyControl, enabling possible privilege escalation via authentication bypass. The impact stated ...

CAN-2005-2960

The CVE CVE-2005-2960 is linked to cfengine and arises from insecure temporary-file handling that allows a local attacker to perform a symlink attack to overwrite files owned by the cfengine user (likely root). Connected documents describe vulnerable cfengine versions (e.g., cfengine <= 1.6.5 ...

CAN-2005-2871

Summary (CVE-2005-2871) : A buffer/heap overflow in IDN hostname handling affects Mozilla Firefox and derivatives (e.g., Thunderbird). Improper processing of international domain names (IDN) can allow a remote attacker to cause a crash or execute arbitrary code in the user’s security context. The...

CVE-2005-1828

creationtimestamp| type| source ---|---|--- 2024-02-13 19:17:16+00:00| seen| https://t.me/ctinow/184056...

CVE-2005-2059

creationtimestamp| type| source ---|---|--- 2024-02-08 23:16:49+00:00| seen| https://t.me/ctinow/181689...

CVE-2005-2293

creationtimestamp| type| source ---|---|--- 2024-02-08 23:16:48+00:00| seen| https://t.me/ctinow/181688...

CVE-2005-1141

creationtimestamp| type| source ---|---|--- 2024-02-08 21:16:23+00:00| seen| https://t.me/ctinow/181631...

CVE-2005-0253

creationtimestamp| type| source ---|---|--- 2024-01-26 23:16:27+00:00| seen| https://t.me/ctinow/174526...

CVE-2005-0252

creationtimestamp| type| source ---|---|--- 2024-01-26 23:16:24+00:00| seen| https://t.me/ctinow/174524...

CVE-2005-1880

creationtimestamp| type| source ---|---|--- 2024-01-26 21:16:17+00:00| seen| https://t.me/ctinow/174474...

Malicious code in wlwz-2312-2005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dede194e824987083bdcc223f15ac57d3a85166a7a6175b6214123f4a639a3f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...