CAN-2005-0448

CVE-2005-0448 is a race condition in Perl's File::Path::rmtree that could allow a local user to create setuid binaries or delete arbitrary files via a symlink attack. Connected advisories confirm this issue as the original rmtree race (not a remote exploit) and note it has been reintroduced in ce...

CAN-2005-0107

The CVE-2005-0107 issue affects bsmtpd (a batched SMTP mailer used with sendmail/postfix) where 2.3 and earlier do not properly sanitize e-mail addresses, allowing remote command execution. Public advisories (e.g., Debian DSA-690-1) note remote exploitation and provide fixed packages (e.g., bsmtp...

CAN-2005-0446

CVE-2005-0446 affects Squid 2.5.STABLE8 and earlier, with DoS via crafted DNS responses that trigger a crash during FQDN/ipcache handling. The connected advisories indicate multiple distributions addressing this issue: Ubuntu USN-84-1 (DNS/ACLs and the bad DNS response in DNS resolution), Fedora ...

CAN-2005-0390

CVE-2005-0390 corresponds to a buffer overflow in Axel (an HTTP/HTTPS download accelerator). The connected documents clearly describe a vulnerability in Axel before version 1.0b where the program’s handling of remote input (specifically in the HTTP redirection/conn.c path) can overflow a buffer a...

CAN-2004-0957

CVE-2004-0957 is cited across multiple connected advisories (Ubuntu USN-32/109, SLES9 MySQL updates, FreeBSD ports) as part of historical MySQL vulnerabilities. Documented info shows it co-occurs with advisories requesting updates or patches to MySQL components; CVSS scores in these entries range...

CAN-2005-1109

CVE-2005-1109 refers to JunkBuster, a HTTP proxy. The vulnerability (affecting JunkBuster before version 2.0.2-r3) arises from heap corruption due to inconsistent use of an internal function, enabling remote attackers to crash the daemon and potentially execute arbitrary code. Impact is a remote ...

CAN-2005-0393

CVE-2005-0393 relates to crip 3.5: the helper scripts do not properly use temporary files, which can allow local users to cause an unknown impact with unknown attack vectors. The connected sources (OSV, NVD, Debian tracker, Red Hat entry, Debian/OSS plugins) confirm the same description. No speci...

CAN-2005-1345

CVE-2005-1345 is associated with multiple Squid vulnerabilities described across openvas entries and CentOS/Red Hat advisories. The issues involve: (1) improper handling of access control lists that could allow an authorised remote user to gain more access than intended, (2) a flaw related to how...

CAN-2005-0525

Technical details for CVE-2005-0525 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-0953

CVE-2005-0953 concerns a race-condition in the bzip2 compressor/decompressor (v1.0.2 and earlier). During decompression in a directory the attacker could manipulate permissions of an unrelated file the user has access to, enabling local privilege modification. A related issue, CVE-2005-1260, desc...

CAN-2005-1934

CVE-2005-1934 affects the Gaim multi-protocol instant messaging client, where a malformed MSN Messenger message can cause memory allocation errors and crash the application. Connected advisories describe this as part of two DoS issues in Gaim and reference fixed-updates (e.g., upgrade to version ...

CAN-2005-1260

The CAN-2005-1260 entry concerns bzip2 up to version 1.0.2 (and earlier). A crafted bzip2 file can trigger an infinite loop during decompression, leading to denial of service by exhausting disk space or CPU time. Several connected advisories confirm impact is via decompression of untrusted archiv...

CAN-2005-1858

This CVE affects FUSE (filesystem in userspace): FUSE 2.x before 2.3.0 fails to clear memory from unfilled pages after a read returns a short byte count, potentially allowing local users to disclose sensitive information. The Debian advisory (DSA-744-1) links CVE-2005-1858 to fuse and notes a fix...

CAN-2005-1992

CVE-2005-1992 concerns Ruby’s XMLRPC server, where an insecure default in utils.rb (and related XMLRPC.iPIMethods handling) can allow a remote attacker to execute arbitrary commands if the server is used in a vulnerable configuration. Public advisories (e.g., RHSA-2005:543, USN-146-1) document th...

CAN-2005-1853

CVE-2005-1853 affects the Gopher client (gopher.c) in version 3.0.5, where improper creation of temporary files permits local users to gain privileges. Multiple sources (Red Hat advisory, CVE listing, Debian/Debian OSSVOS) confirm the flaw and its local-privilege elevation impact. Debian’s DSA-77...

CAN-2005-1852

CAN-2005-1852 is an integer overflow in libgadu (Gadu library) that affects Kopete/Kdenetwork and ekg-related components. A remote attacker could send specially crafted Gadu-Gadu messages to trigger the overflow, potentially crashing the involved application or executing arbitrary code. Public ad...

CAN-2005-2161

CVE-2005-2161 maps to a phpBB2 XSS issue. The Debian advisory (DSA-768-1) reports a remote cross-site scripting vulnerability in phpBB2 (missing input validation) that can inject arbitrary script via nested tags. Affected product: phpBB2; root cause: missing input validation leading to XSS. Remed...

CAN-2005-2724

CVE-2005-2724 is a real cross-site scripting (XSS) issue in SqWebmail, part of the Courier suite. The vulnerability arises from missing input sanitising in the handling of file attachments, enabling a remote attacker to inject script/HTML that may execute in a user’s browser when attachments are ...

CAN-2005-2231

CVE-2005-2231 is linked to the heartbeat component in High-Availability Linux deployments. Debi an advisory DSA-761-1/761-2 describes insecure temporary file creation in heartbeat, with fixes provided for older Debian releases (e.g., 1.2.3-9sarge2 for sarge). OpenVAS entries (Debian DSA, Gentoo G...

CAN-2005-1636

CVE-2005-1636 is a MySQL vulnerability describing an insecure temporary file handling bug in the mysql_install_db script that could allow a local user to execute arbitrary SQL commands during installation. Public advisories (RHSA-2005:685, DSA-783-1, CentOS CES A-2005:685, MDKSA-2006:045) cite up...