CAN-2004-0411

CVE-2004-0411 is referenced across multiple advisories (Gentoo GLSA 200405-11, Debian DSA 518-1, Slackware SSA:2004-238-01, Gentoo GLSA 200405-11, FreeBSD/OPenVAS entries) as affecting kdelibs. OpenVAS entries assign a CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and describe the host as missing up...

CAN-2004-0077

CVE-2004-0077 is referenced in multiple Linux kernel security advisories (e.g., Debian DSA 442-1 and GLSA 200403-02) attached to OpenVAS entries, indicating a kernel vulnerability in the 2.4.x lineage across architectures (e.g., s390, mips, ia64). The OpenVAS data shows CVSS base score 7.2 with v...

CAN-2004-0418

CVE-2004-0418 is a vulnerability in the CVS server (CVS) where serve_notify() may perform an out-of-bounds write (single-byte) when handling data lines, potentially enabling arbitrary code execution. The linked advisories/document set (FreeBSD, Debian, Gentoo, Mandrake, Slackware, etc.) describe ...

CAN-2004-0794

CVE-2004-0794 concerns lukemftpd/tnftpd before 2004-08-10. The remote server is vulnerable to multiple signal handler race conditions in lukemftpd, which can be exploited by remote authenticated attackers to cause a denial of service or to execute arbitrary code on the server. OpenVAS/Nessus entr...

CAN-2004-0558

CVE-2004-0558 is referenced across multiple advisories (Slackware SSA:2004-266-01, Gentoo GLSA 200409-25, SLES9 updates, FreeBSD/FreeBSD Ports) as a CUPS-related issue. OpenVAS entries label it as a CUPS DoS with CVSS 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P). The connected docs discuss affected packages ...

CAN-2004-0755

CVE-2004-0755 relates to Ruby CGI::Session's FileStore creating session files with insecure permissions, potentially allowing session information leakage. The JVN entry describes the issue, noting improper file permissions in CGI::Session FileStore. Fedo ra advisories mention a security fix and p...

CAN-2004-0772

CVE-2004-0772 is a set of double-free vulnerabilities in MIT Kerberos 5 (krb5), specifically in the error handling code for krb524d in MIT Kerberos 5 1.2.8 and earlier. These flaws may allow remote attackers to execute arbitrary code, primarily by exploiting double-free conditions in the KDC and ...

CAN-2004-0781

CVE-2004-0781 maps to an Icecast XSS in icecast-server (list.cgi) affecting 1.3.12 and earlier. The vulnerability arises from improper input sanitization in the status display, allowing remote attackers to craft a link containing script code that executes in a user’s browser, potentially stealing...

CAN-2004-0564

CVE-2004-0564 refers to the RP-PPPoE (rp-pppoe) component. When pppoe is run with setuid root, it can allow local users to overwrite arbitrary files, per multiple advisories (Debian DSA-557-1, Mandrake MDKSA-2004:145) and OSV/NVD entries. The issue arises only in configurations where rp-pppoe is ...

CAN-2004-0559

Usermin maketemp.pl in versions 1.070 and 1.080 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/.usermin directory during installation. Root cause: insecure temporary directory handling in maketemp.pl; attacker can pre-create the directory and place a symlink to a...

CAN-2004-0809

CVE-2004-0809 corresponds to a WebDAV/ mod_dav issue in the Apache WebDAV module that could allow a remote attacker to crash the server (Denial of Service) on installations with WebDAV enabled. The connected OpenVAS/Nessus entries reference SuSE SLES9 advisories (patches 5009547 and 5013988) addr...

CAN-2004-0913

CVE-2004-0913 affects ecartis (0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8). An attacker in the same domain could gain administrator privileges and modify configuration. Public documents reference Debian advisory DSA-572-1 and OpenVAS/Nessus entries confirming the...

CAN-2004-0788

CVE-2004-0788 is confirmed in gdk-pixbuf/gtk+ stack. The ICO image loader decodes ICO headers with an integer overflow in DecodeHeader(), exposeable to remote attackers via crafted ICO files, potentially causing a denial of service (and, per some sources, possible arbitrary code execution in cont...

CAN-2004-0815

CVE-2004-0815 corresponds to a remote arbitrary file-access vulnerability in Samba. Public details in connected documents indicate that Samba versions prior to 2.2.11 and 3.x prior to 3.0.7 were vulnerable to accessing files outside the share’s defined path. Some sources note that later research ...

CAN-2004-0563

The CVE CAN-2004-0563 (CVE-2004-0563) relates to freenet6 where the tspc.conf file is world-readable, exposing potential sensitive data (e.g., username and password) to local users. Connected advisories confirm Debian’s DSA-555-1 and related Debian security notices describe a local information-le...

CAN-2004-0881

CVE-2004-0881 affects getmail: getmail 4.x before 4.2.0 and other versions before 3.2.5. When run as root, it allows local users to overwrite arbitrary files via a symlink attack on subdirectories of the maildir. Impact is local file writes. Remediation: upgrade to getmail 4.2.0 or newer (or 3.2....

CAN-2004-0805

CVE-2004-0805 describes a buffer overflow in mpg123 (versions 0.59r and possibly 0.59s) in layer2.c that could allow a remote attacker to execute arbitrary code when processing crafted MP3/MP2 files. Documents from NVD, Debian DSA-564-1, and OpenVAS entries corroborate the vulnerability across mp...

CAN-2004-0851

The CVE refers to Net-Acct and concerns insecure temporary file creation that enables local users to overwrite arbitrary files via a symlink attack on temporary files. Root cause: insecure handling of temporary file creation in Net‑Acct before version 0.71. The issue is local in scope and affects...

CAN-2004-0557

SoX versions 12.17.2–12.17.4 are affected by multiple buffer overflows in wav.c (st_wavstartread) that allow remote code execution via crafted WAV header fields. Public reports credit Ulf Harnhammar; affected commands include sox (and play). Debian and Gentoo advisories document remote, arbitrary...

CAN-2004-0688

OpenMotif family components (e.g., openmotif, openmotif-libs, openmotif-devel, and the libXPM-related code) are associated with CVE-2004-0687 and CVE-2004-0688 due to stack/integer overflow in the libXPM image handling. The connected advisories (notably SUSE/SLES9 OpenMotif updates, Red Hat RHSA-...