CAN-2003-0961

CVE-2003-0961 is referenced across multiple OpenVAS entries tying it to kernel-related issues in 2.4.x series and Debian/Gentoo advisories (DSA GLSA 200312-02, DSA 439-1, DSA 442-1, and 450-1) and Slackware advisory SSA:2003-336-01. The connected documents indicate affected architectures and patc...

CAN-2004-0110

CVE-2004-0110 relates to libxml and libxml2 buffer overflow bugs in URL parsing and DNS handling, allowing remote arbitrary code execution. Connected advisories (SUSE, Fedora, CentOS, RHEL) confirm exploitation via long URLs or DNS responses and describe patches to libxml/libxml2. Remediation is ...

CAN-2004-0105

Connected advisories and scanners link CVE-2004-0105 to metamail-related advisories across multiple distributions (Slackware SSA:2004-049-02, Gentoo GLSA 200405-17, Debian DSA-449, FreeBSD ports/metamail entries). These sources describe missing updates for metamail and reference CVE-2004-0104/010...

CAN-2004-0366

CVE-2004-0366 corresponds to a SQL injection vulnerability in libpam-pgsql (pam-pgsql) prior to version 0.5.2, where not all user data is escaped before database submission. Debian security records (DSA-469/DSA-469-1) document a remote flaw in the PAM module for PostgreSQL authentication and stat...

CAN-2004-0374

CVE-2004-0374 affects Interchange (pre-5.0.1). The vulnerability results from missing input sanitising, allowing remote attackers to expose the content of arbitrary variables and read/modify sensitive SQL information via an HTTP request that ends with the string SQLUSER . Public details in the co...

CAN-2004-0111

CVE-2004-0111 affects gdk-pixbuf before 0.20, where a malformed BMP file can cause a denial of service (crash) in apps that use the library. Public records across Debian/Red Hat advisories and OSV entries confirm the vulnerability, with Debian/DSA 464-1 and RHSA-2004:103 noting the impact and rec...

CAN-2004-0151

CVE-2004-0151 corresponds to a local privilege escalation in xitalk, affecting xitalk packages 1.1.11 and earlier. Debian’s DSA-462-1 notes a missing privilege release that allows a local user to execute arbitrary commands under the GID utmp, potentially removing traces from utmp. Remediation per...

CAN-2004-0372

CVE-2004-0372 corresponds to multiple vulnerabilities in xine-related components (xine-ui and xine-lib). Publicly referenced advisories (Debian DSA-477-1, GLSA 200404-20, Gentoo GLSA) describe insecure temporary-file creation in xine-check and xine-bugreport scripts, and, more broadly, the abilit...

CAN-2004-0421

CVE-2004-0421 is a libpng vulnerability referenced across multiple advisories. The issue stems from an off-by-one error in the png_format_buffer function (pngerror.c) in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, which allows a remote attacker to ...

CAN-2004-0400

CVE-2004-0400 is tied to Exim, with multiple advisories across environments (Debian DSA-501, DSA-502-1; Gentoo GLSA 200405-07; FreeBSD/OpenVAS entries). Public details in connected docs indicate related issues include Exim at-tls handling and a remote-exploit risk (e.g., buffer overflows in speci...

CAN-2004-0396

CVE-2004-0396 is a heap-based buffer overflow in CVS when parsing Entry lines for the pserver mechanism, enabling remote code execution. Affected CVS releases include CVS feature 1.12.x up to 1.12.7 and stable 1.11.x up to 1.11.15; exploitation occurs via malformed Entry lines that overflow mallo...

CAN-2004-0178

Technical details for CVE-2004-0178 are not publicly provided in the supplied documents; no affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from connected advisories.

CAN-2004-0409

CVE-2004-0409 affects XChat/XChat2 across multiple platforms (Red Hat, Debian, FreeBSD). The vulnerability is a stack-based buffer overflow in the SOCKSv5/Socks-5 proxy handling that could allow remote code execution. Advisories (RHSA-2004:585, DSA-493, Debian DSA-493) describe a patched updated ...

CAN-2003-0068

CVE-2003-0068 affects the Eterm terminal emulator (0.9.1 and earlier). An attacker can modify the window title using a specific escape sequence and then insert it back into the user’s command line, potentially allowing arbitrary commands to be executed. Remediation is to upgrade to eterm 0.9.2 (a...

CAN-2004-0398

CVE-2004-0398 affects the neon library (libneon) and is referenced in multiple advisories (GLSA-200405-13/15, Debian DSA-506/507, Mandrake MDKSA-2004:049/078). The issue is a heap-based buffer overflow in neon’s date parsing routines (notably ne_rfc1036_parse and ne_httpdate_parse) that could, de...

CAN-2004-0472

CVE CAN-2004-0472 maps to a Debian security advisory (DSA-504-1) describing a remote buffer overflow in the Kerberos 4 kadmind component of heimdal. The issue arises from missing input sanitising and could allow reading a negative amount of data, potentially triggering unexpected daemon behavior....

CAN-2004-0458

CVE-2004-0458 affects mah-jong (server component) prior to version 1.6.2. A missing argument can trigger a NULL pointer dereference, allowing remote attackers to cause a denial of service (server crash). Public advisories reference Debian (DSA-503), Ubuntu, and CVE records; the mitigation is to u...

CAN-2004-0414

CAN-2004-0414 concerns several CVS vulnerabilities including insufficient input validation on Entry lines (and related issues 0416/0417/0418). Across connected docs, CVS servers (cvs server or pserver) are affected with potential information disclosure, denial of service, or possibly arbitrary co...

CAN-2004-0827

CVE-2004-0827 is associated with ImageMagick across multiple advisories (Debian DSA 547-1, Ubuntu USN-35-1, Red Hat RHSA-2004:636). The connected documents describe a memory corruption issue in image processing (buffer/heap overflow in decoding BMP/DIB/related formats) that could allow arbitrary ...

CAN-2004-0411

CVE-2004-0411 is referenced across multiple advisories (Gentoo GLSA 200405-11, Debian DSA 518-1, Slackware SSA:2004-238-01, Gentoo GLSA 200405-11, FreeBSD/OPenVAS entries) as affecting kdelibs. OpenVAS entries assign a CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and describe the host as missing up...