CAN-2004-1014

CVE-2004-1014 affects nfs-utils (statd) where statd did not ignore the SIGPIPE signal, allowing remote attackers to cause a denial-of-service by terminating a TCP connection prematurely. Documented in NFS-related advisories (Debian DSA 606-1, Red Hat RHSA-2005:014, Ubuntu USN-36-1) and noted by N...

CAN-2003-0963

CVE-2003-0963 : A remotely-triggerable buffer overflow was discovered in the lftp client when performing directory listings over HTTP/HTTPS. Exploitation could allow arbitrary code execution on the client. Public advisories indicate affected versions include lftp 2.3.0 through 2.6.9, with a fix i...

CAN-2003-0985

The provided OpenVAS/DSA/Gentoo entries reference CVE-2003-0985 in kernel-related advisories (e.g., Debian DSA 417-1/417-2, Gentoo GLSA 200401-01) affecting 2.4.x kernel packages (kernel-image-2.4.18-1-alpha, kernel-patch-2.4.18-powerpc, etc.). The CVSS base is shown as 7.2 with vector AV:L/AC:L/...

CAN-2003-0972

Mode C: The CAN-2003-0972 entry corresponds to the Debian screen local vulnerability (integer overflow) affecting screen, a VT100/ANSI terminal multiplexer. The connected advisories describe an exploitable condition causing local privilege escalation by overflowing buffers through crafted escape ...

CAN-2004-0852

CVE-2004-0852 describes a buffer overflow in htget 0.93 that allows remote code execution via a crafted URL. Debian's DSA-611-1 fixes this in htget 0.93-1.1woody1. Root cause: improper bounds handling in URL processing. Impact: remote attacker could execute arbitrary code on vulnerable systems. R...

CAN-2003-0949

CVE-2003-0949 relates to xsok, a X11 Sokoban game, where xsok 1.02 does not properly drop privileges before locating and executing the gunzip program. This local-privilege-escalation flaw allows a local user to run arbitrary commands with the GID of games. Public sources in the connected docs (NV...

CAN-2004-0975

CVE-2004-0975 concerns the der_chop script in the OpenSSL package used by Trustix Secure Linux 1.5–2.1 and other OSes. The vulnerability arises from a symlink-based attack on temporary files, allowing local users to overwrite files. Connected documents confirm der_chop as the affected component a...

CAN-2004-1287

Two stack-based buffer overflow bugs in NASM were disclosed, leading to CVE-2004-1287 and CVE-2005-1194. An updated NASM package fixes these issues; Red Hat RHSA-2005:381 (and CentOS/CESA advisories) note the vulnerability in NASM up to affected versions and recommend upgrading to patched package...

CAN-2004-0915

The provided Connected docs confirm CVE-2004-0915 affects ViewCVS prior to 0.9.2. The tar export feature bypasses the hide_cvsroot and forbidden settings, enabling remote attackers to leak restricted repository information. Gentoo GLSA 200412-26 links this CAN-2004-0915 issue with an information ...

CAN-2004-0999

ZGV is affected by CVE-2004-0999. Affected software: zgv (SVGAlib graphics viewer). Vulnerability: remote attacker can cause a denial of service (application crash/segmentation fault) by feeding crafted multiple-image (animated) GIFs. Root cause: described as integer overflows and unsanitised inp...

CAN-2004-0993

CVE-2004-0993 describes a buffer overflow in hpsockd (the Hewlett-Packard socks server) prior to version 0.6. The overflow, due to missing input sanitising, could be triggered remotely to cause a denial of service or, in some cases, execute arbitrary code. Debian fixed this in 0.6.woody1 (stable)...

CAN-2004-1289

CVE-2004-1289 corresponds to multiple buffer overflow flaws in pcal (notably in getline in pcalutil.c and in get_holiday in readfile.c) that could allow remote code execution via a crafted calendar file. Affected software is pcal (version 4.7.1) across various ecosystems (Debian, Ubuntu, FreeBSD ...

CAN-2004-0561

CVE-2004-0561 is a format string vulnerability in the log routine of the gopherd server (Debian gopher package), affecting version 3.0.3. It allows remote attackers to cause denial of service and possibly execute arbitrary code. Debian security advisories (DSA-638-1) fix the issues by upgrading t...

CAN-2004-1170

CVE-2004-1170 affects the a2ps package (notably versions around 4.13). The connected sources describe a vulnerability where an attacker can leverage shell metacharacters in a file name to execute arbitrary commands remotely, due to insecure handling of the filename in the tool’s processing (e.g.,...

CAN-2004-1076

CVE-2004-1076 affects the Atari800 emulator. The provided sources describe multiple buffer overflows in the RtConfigLoad function in rt-config.c, affecting versions before 1.3.4, allowing local users to execute arbitrary code via large values in the configuration file. Exploitation details are no...

CAN-2004-0914

CVE-2004-0914 is not a reserved entry in the connected data; multiple advisories reference it. The CVE is associated with OpenMotif/Lesstif components and appears in: Gentoo GLSA 200502-06 (lesstif), Ubuntu USN-83-1/2, Debian DSA-816-1, and Red Hat Satellite/OpenMotif-related advisories (RHSA-200...

CAN-2004-0976

CVE-2004-0976 is referenced across multiple advisories (Debian DSA-620-1, Red Hat RHSA-2005:881, Gentoo GLSA 200412-04, Ubuntu USN-16-1) as a Perl-related issue. Public details in connected documents indicate that Solar Designer reported temporary-file handling bugs in Perl modules, potentially a...

CAN-2004-1165

CVE-2004-1165 is referenced in multiple advisories tied to kdelibs/konqueror. The Red Hat RHSA-2005:065 notes two separate flaws: (1) a sandbox/Java-applets issue in Konqueror that could allow a remote attacker to escalate privileges and access arbitrary files, and (2) an FTP kioslave flaw that c...

CAN-2004-0996

CVE-2004-0996 affects the cscope utility (versions 15-4 and 15-5). The root cause is insecure temporary file creation: cscope creates temporary files in world-writable directories with predictable names, enabling a local attacker to perform a symlink attack and overwrite arbitrary files with the ...

CAN-2004-0994

CVE-2004-0994 refers to multiple integer overflows in xzgv (0.8 and earlier) in image processing, notably in read_prf.c/read_prf handling, which can lead to remote code execution via crafted images. Related documents (GLSA-200501-09, OpenVAS entries, and NVD) confirm the issue and classify the im...