CAN-2005-0085

CVE-2005-0085 relates to a cross-site scripting vulnerability in htdig that can be exploited remotely. Public records in connected documents show multiple advisories across distros: Debian: DSA-680-1 and a corresponding Debian security advisory entry for htdig. SUSE: exists as a security update f...

CAN-2005-0639

The CVE entry CVE-2005-0639 concerns the xli image viewer. Connected sources confirm multiple related issues (CVE-2005-0638 and CVE-2005-0639) in xli’s handling of images: inappropriate escaping of shell meta-characters and insufficient validation of image properties, which can cause heap/buffer ...

CAN-2005-0070

CVE-2005-0070 affects synaesthesia (2.1 and earlier) where the binary, installed setuid root, does not drop privileges before processing user configuration and mixer files. The underlying issue is local privilege escalation that allows a local user to read arbitrary files. Debian's DSA-681-1 fixe...

CAN-2005-0372

CVE-2005-0372 is a directory traversal vulnerability in gFTP (GTK+ client). A remote attacker sending crafted directory listings via LIST could cause overwriting of arbitrary files on the victim’s system. The issue affects gFTP prior to the fixed package; multiple advisories (RHSA-2005:410, CESA-...

CAN-2005-0158

CVE-2005-0158 applies to BidWatcher, a tool for bidding on eBay auctions. The vulnerability is a format-string flaw in netstuff.cpp that can be triggered by remote inputs via an eBay HTTP server (or a spoofed server/ MITM), potentially allowing denial of service and arbitrary code execution. Publ...

CAN-2005-0446

CVE-2005-0446 affects Squid 2.5.STABLE8 and earlier, with DoS via crafted DNS responses that trigger a crash during FQDN/ipcache handling. The connected advisories indicate multiple distributions addressing this issue: Ubuntu USN-84-1 (DNS/ACLs and the bad DNS response in DNS resolution), Fedora ...

CAN-2005-0385

CVE-2005-0385 refers to a buffer overflow in luxman, an SVGA-based PacMan clone. The issue is a local root vulnerability triggered by an overly long -f argument, potentially allowing arbitrary code execution as root on affected systems. Debian’s DSA-693-1 describes the fix: version 0.41-17.2 (and...

CAN-2005-0099

CVE-2005-0099 concerns the SDL port of Abuse (abuse-SDL). The advisory detail shows that abuse-SDL before version 2.00 does not drop privileges when creating certain files, allowing local users to create or overwrite arbitrary files. Affected context includes Debian (DSA-691-1) and SUSE entries t...

CAN-2005-0088

CVE-2005-0088 relates to an information leak in mod_python (publisher handle) that could allow remote access to published objects without permission. Multiple OpenVAS entries, Gentoo GLSA 200502-14, and SuSE/FreeBSD advisories describe affected packages such as apache2-mod_python and mod_python a...

CAN-2005-0152

CVE-2005-0152 concerns SquirrelMail 1.2.6. The vulnerability allows remote code execution through URL manipulation, by exploiting an unsanitised input/URL handling, enabling arbitrary code execution with typical web server privileges (e.g., www-data). This is a remote, client-side input handling ...

CAN-2005-2240

CVE-2005-2240 affects xpvm (Graphical console for PVM); xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file. Debian and OSV/OpenVAS entries confirm the vulnerability; fixes exist in xpvm 1.2.5-7.3sarge1 (and 1.2.5-7.2w...

CAN-2005-0763

CVE-2005-0763 affects Midnight Commander (mc). The issue is a buffer overflow in mc up to version 4.5.55 and earlier, triggered by certain directory completion scenarios (and related handling in mc’s components), potentially allowing arbitrary code execution. Public sources (Debian DSA-698-1, OSV...

CAN-2005-0386

CAN-2005-0386 corresponds to a cross-site scripting (XSS) vulnerability in mailreader, reported as a remote issue that affects displaying messages with MIME types text/enriched or text/richtext. Public sources in the connected set identify mailreader before version 2.3.29 as vulnerable, with succ...

CAN-2004-0957

CVE-2004-0957 is cited across multiple connected advisories (Ubuntu USN-32/109, SLES9 MySQL updates, FreeBSD ports) as part of historical MySQL vulnerabilities. Documented info shows it co-occurs with advisories requesting updates or patches to MySQL components; CVSS scores in these entries range...

CAN-2005-0664

CVE-2005-0664 is linked in multiple Solaris patch advisories (GNOME EXIF library) affecting Solaris 10 x86/sparc platforms with patches 121096-04/05 and 121095-04/05. The underlying issue relates to GNOME EXIF tag parsing library used by GNOME 2.6.0 for digital cameras. Affected components includ...

CAN-2005-0017

The provided OpenVAS/Gentoo/Debian/FreeBSD entries identify CVE-2005-0017 and, in some cases, CVE-2005-0018, as vulnerabilities in the f2c utility (Fortran-to-C translator). Technical details across the connected docs indicate the issue is related to insecure temporary file handling in f2c, which...

CAN-2005-1109

CVE-2005-1109 refers to JunkBuster, a HTTP proxy. The vulnerability (affecting JunkBuster before version 2.0.2-r3) arises from heap corruption due to inconsistent use of an internal function, enabling remote attackers to crash the daemon and potentially execute arbitrary code. Impact is a remote ...

CAN-2005-0391

CVE-2005-0391 affects geneweb prior to certain fixes. The Debian advisories describe a local vulnerability during upgrade: the maintainer scripts converted files without verifying their permissions or content, which could allow modification of arbitrary files. Related entries (geneweb 4.10 and ea...

CAN-2004-1341

CVE-2004-1341 is a cross-site scripting (XSS) vulnerability in info2www, due to missing input sanitising. The issue affects info2www prior to version 1.2.2.9, with fixed versions in Debian as 1.2.2.9-20woody (woody) and 1.2.2.9-23 (sid). Debian DSAs (DSA-711-1) document remote exploitation via cr...

CAN-2003-0541

CVE-2003-0541 affects gtkhtml, used by Evolution. The vulnerability is a remote denial of service via a NULL pointer dereference triggered by malformed HTML in gtkhtml, allowing a crash of linked applications. Affected components are gtkhtml (prior to fixed releases), with Debian/DSA-710-1 noting...