CAN-2004-0886

CVE-2004-0886 concerns integer overflow bugs in libtiff used by the kdegraphics/kfax code path. The issue could allow memory corruption or arbitrary code execution when a user opens a crafted TIFF file, due to overflows in libtiff’s processing. The affected product is kdegraphics (and its kfax co...

CAN-2004-0911

CVE-2004-0911 is referenced across multiple scanners in connection with the netkit telnet package (netkit-telnet and netkit-telnet-ssl). The connected Nessus/OpenVAS entries identify Debian/Ubuntu/OpenVAS advisories (e.g., DSA-569-1, DSA-556-1/DSA-556-2, and SUSE CVE page) indicating that remote ...

CAN-2004-0916

CVE-2004-0916 describes a directory traversal vulnerability in cabextract prior to version 1.1. An attacker can construct a cabinet file containing file names with ".." sequences to overwrite arbitrary files on the target system. The connected documents confirm affected software and the basic imp...

CAN-2004-0982

CVE-2004-0982 is linked to mpg123 and is described in multiple feeds as a heap-based buffer overflow in httpdget.c that allows remote code execution via a long URL, affecting mpg123 before the 0.59s-rll patch. The issue is cited in later entries (e.g., CVE-2006-3355 as an incomplete patch continu...

CAN-2004-0980

CVE-2004-0980 is a format-string vulnerability in ez-ipupdate. The connected documents identify ez-ipupdate as affected, specifically versions 3.0.10 through 3.0.11b8, with exploitation possible when running in daemon mode with certain service types in use, allowing remote execution of arbitrary ...

CAN-2003-0193

CVE-2003-0193 affects catdoc/xlsview; msxlsview.sh in xlsview (catdoc 0.91 and earlier) allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names (word$$.html). Debian fixed in 0.91.5-1.woody3/0.91.5-2; other advisories (DSA-575-1) reference the same...

CAN-2004-0986

CVE-2004-0986 affects iptables before 1.2.11. Multiple sources (SUSE SUSE CVE, OSV, NVD) state that under certain conditions, iptables fails to load required modules at system startup, leaving firewall rules possibly unenforced and the system vulnerable to remote attackers. Remediation in sources...

CAN-2004-0964

CVE-2004-0964 concerns a stack-based buffer overflow in the Zinf Audio Player (formerly freeamp) version 2.2.1. The vulnerability arises from insufficient bounds checking when processing a specially crafted PLS playlist file. A remote attacker could exploit this by convincing a user to open a mal...

CAN-2004-1001

CVE-2004-1001 concerns the Shadow project: a vulnerability in the passwd_check function present in Shadow 4.0.4.1 and possibly earlier versions (before 4.0.5) that can allow local users to perform unauthorized actions when pam_chauthtok error handling is faulty. Public advisories (Debian DSA-585-...

CAN-2004-0972

CVE-2004-0972 pertains to the lvm package (notably the lvmcreate_initrd script) and is linked across multiple advisories (Trustix/Ubuntu/Debian/Gentoo). The vulnerability arises from insecure handling of temporary files, allowing a local attacker to overwrite files via a symlink attack in world-w...

CAN-2004-0970

CVE-2004-0970 concerns the gzip package: the (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package allow local users to overwrite files via a symlink attack on temporary files. This is a local privilege/overwrite issue, not remote code execution. The vulnerability is tied to the handling...

CAN-2004-0981

CVE-2004-0981 is linked to ImageMagick and is discussed in multiple advisories (Debian DSA 593-1, Gentoo GLSA 200411-11, Ubuntu USN-7-1/USN-10-1, FreeBSD Ports) with CVSS base 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C). The OpenVAS entries and Gentoo/Ubuntu/Debian advisories describe a vulnerability in Im...

CAN-2004-1052

CVE-2004-1052 affects the BNC IRC bouncing proxy. The issue is a remote buffer‑overflow in the getnickuserhost() function triggered by IRC server responses, allowing arbitrary code execution on the client host that processes the overflowing response. Public sources highlight this as a remote vuln...

CAN-2004-1051

CVE-2004-1051 affects sudo before 1.6.8p2, enabling local users to execute arbitrary commands by exploiting how bash environments can define functions with the same names as commands via () style variables. Public records in NVD confirm the vulnerability in sudo, with Debian advisories (DSA 596-1...

CAN-2004-1013

The CVE CVE-2004-1013 is represented in connected OpenVAS entries linked to Cyrus IMAPd advisories across multiple platforms (Ubuntu USN-31-1, Debian DSA-597-1, Gentoo GLSA 200411-34, FreeBSD ports). The evidence indicates a Cyrus IMAPd vulnerability likely caused by buffer overflow in the argume...

CAN-2002-0986

CVE-2002-0986 concerns the PHP mail() function in PHP 4.x up to 4.2.2, which does not filter ASCII control characters from its arguments. This could allow remote attackers to modify mail message content, including headers, and potentially use PHP as a “spam proxy.” The connected documents confirm...

CAN-2002-1132

SquirrelMail vulnerability CVE-2002-1132: versions up to 1.2.7 and earlier allow remote attackers to determine the absolute pathname of options.php via a malformed optpage argument, leading to information disclosure. Debian advisories state the fix is in version 1.2.6-1.2 for woody and 1.2.8-1.1 ...

CAN-2003-0902

CVE-2003-0902 affects minimalist mailing list manager (versions 2.4, 2.2 and possibly others) with a remote code execution vulnerability due to unsanitised input. Debian DSAs confirm fixes: upgrade to minimalist 2.4-1 (sid) or 2.2-4 (woody). Other references (NVD/Nessus/OpenVAS) corroborate unkno...

CAN-2003-0962

CVE-2003-0962 refers to a heap-overflow bug in rsync prior to 2.5.7, occurring when rsync is run in server mode (listening on port 873). The vulnerability allows a remote attacker to execute arbitrary code with the privileges of the rsync server by sending malformed requests, potentially affectin...

CAN-2004-0888

CVE-2004-0888 concerns an integer overflow in the CUPS pdftops filter. The issue can allow remote code execution on 64-bit platforms when a crafted PDF is printed via the lp user. Several advisories (RHSA-2008-0206, CESA-2008:0206, MDKSA/MCU references) indicate that patches backported to Red Hat...