CAN-2004-1027

CVE-2004-1027 is a directory traversal vulnerability in unarj. The issue arises when extracting ARJ archives with the -x option; specially crafted archives can cause files to be created in the parent directory (…/.. paths) and, when used recursively, may overwrite critical system files. Publicly ...

CAN-2005-0005

CVE-2005-0005 is not a standalone hidden entry: connected advisories tie this CVE to ImageMagick-related issues across multiple distributions (Debian DSA-646-1, Gentoo GLSA 200501-26/37, FreeBSD ports, Ubuntu USN-62-1, etc.). The OpenVAS data show a base CVSS v2 of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P...

CAN-2005-0108

CVE-2005-0108 affects Apache mod_auth_radius 1.5.4 and the libpam-radius-auth module. The issue is a remote denial-of-service caused by a malformed RADIUS_REPLY_MESSAGE with a length of 1, triggering a memcpy with a -1 length argument. Public records outside the initial doc identify this as an in...

CAN-2005-0077

CVE-2005-0077 affects perl-DBI. Connected advisories (SUSE, Gentoo, FreeBSD, Debian, Ubuntu) indicate the issue is tied to insecure temporary-file handling in the module. Remediation in affected distros includes applying patches or updates (e.g., SUSE YOU patch 9838; Debian DSA 658-1; Ubuntu USN-...

CAN-2005-0004

CVE-2005-0004 affects MySQL: the mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other legacy 3.x series enables a local user to read/overwrite arbitrary files via a symlink attack on temporary files. Root cause is insecure handling of temporary files ...

CAN-2005-0078

CVE-2005-0078 refers to a KDE screensaver issue disclosed in early KDE/kdelibs/kdebase advisories. The KDE screensaver (kscreensaver) in KDE up to version 3.0.5 fails to properly check the return value from a critical function, enabling a local attacker with physical access to crash the screensav...

CAN-2005-0079

CVE-2005-0079 targets the xtrlock utility. The OpenVAS/NVD/OSV reports describe a buffer overflow in xtrlock 2.0 that allows local users to cause a denial of service (crash) and hijack the desktop session. Exploitation details are not provided in the supplied documents. Debian advisory DSA-649-1 ...

CAN-2005-0095

CVE-2005-0095 affects Squid: a vulnerability in the Web Cache Communication Protocol (WCCP) message parsing can trigger a memory access exception, potentially causing a denial-of-service. Exploitation is described as using a specially crafted WCCP I_SEE_YOU message to crash the Squid process. Rem...

CAN-2005-0018

CVE-2005-0018 corresponds to the f2c package (version 3.1) where the f2 shell script allows local users to read arbitrary files via a symlink attack on temporary files. Multiple connected sources (SU​SE CVE entry, Debian/DSA alerts, NVD/OSV entries) confirm this vulnerability affecting the f2c/ f...

CAN-2005-0071

The CVE-2005-0071 entry applies to Video Disk Recorder (VDR) prior to version 1.2.6. The vulnerability is that VDR did not securely create files, allowing a local attacker to overwrite arbitrary files via insecure file handling. Public records (OSV OSV-) summarize: vdr before 1.2.6 does not secur...

CAN-2005-0076

CVE-2005-0076 corresponds to multiple buffer overflows in the XView library 3.2. These flaws may allow local users to execute arbitrary code via setuid applications that link against XView. Documented in NVD, Debian/SUSE OpenVAS entries, and CVE listings. No exact vulnerable versions beyond XView...

CAN-2004-1379

The CVE CAN-2004-1379 describes a heap overflow in the DVD subpicture decoder of xine-lib (CVE-2004-1379). Public reports in Debian and OpenVAS indicate this could allow remote code execution by handling a malicious MPEG, with Debian noting the issue affects xine-lib and providing fixed packages ...

CAN-2005-0102

CVE-2005-0102 affects Evolution (GNOME) via a flaw in camel-lock-helper. Connected advisories (Ubuntu USN-69-1, Debian DSA-673-1, Gentoo GLSA 200501-35, CentOS/CESA-2005:397) describe an integer/buffer handling issue in camel-lock-helper that could allow local privilege escalation or code executi...

CAN-2005-0089

CVE-2005-0089 is reflected in multiple OpenVAS entries tied to Python updates across Linux distributions (Debian DSA-666-1, Gentoo GLSA 200502-09, SLES9 security updates, FreeBSD ports, Ubuntu USN-73-1). Descriptions indicate the remote host requires updates to Python packages; CVSS base score is...

CAN-2004-1120

The CVE CAN-2004-1120 applies to prozilla (a multi-threaded download accelerator). Multiple buffer overflow flaws could be triggered remotely to execute arbitrary code. Public advisories (e.g., Debian DSA-663-1) document remote code execution via these overflows and list fixed versions: prozilla ...

CAN-2005-0202

CVE-2005-0202 describes a directory traversal in Mailman 2.1.5 and earlier, exploiting the true_path function in private.py to read arbitrary files via crafted path patterns like ../ and .../..//. Affects Mailman 2.1.5 and earlier; remote attackers could access sensitive files if the application ...

CAN-2004-1180

CVE-2004-1180 affects the rwhod daemon in netkit-rwho on little-endian architectures, with a remote denial-of-service possible due to missing input validation in versions before 0.17. The Debian DSA mentions fixed releases (0.17-4woody2 for woody and 0.17-8 for sid); other OpenVAS/NASL entries co...

CAN-2005-0019

CVE-2005-0019 affects hztty, a converter for GB/Big5 and zW/HZ encodings used in a tty session. Debian’s DSA-675-1 notes a local privilege-escalation flaw that can allow non-privileged users to execute arbitrary commands with utmp group privileges on hztty prior to the patched versions. The advis...

CAN-2005-0105

CVE-2005-0105 affects the typespeed package. The Debian advisories (DSA-684-1) describe a local format-string vulnerability in typespeed

CAN-2005-0073

CVE-2005-0073: A buffer overflow in queue.c in sympa 3.3.3 (when running setuid) can allow a local user to execute arbitrary code. Public references describe this as a local privilege escalation vulnerability in Sympa; affected releases include sympa prior to 4.1.3. Mitigation in the cited OpenVA...