CAN-2005-1046

CVE-2005-1046 corresponds to a buffer overflow in the KDE kimgio library used by kdelibs3/kdelibs (KDE 3.3.x). The issue arises when processing PCX images, enabling potential arbitrary code execution on vulnerable systems. Public feeds (Fedora 2005-350; Gentoo GLSA 200504-22; Debian DSA 714-1; SL...

CAN-2005-0472

GAIM (multi-protocol IM client) is affected by two remote issues: (1) a SNAC packet handling flaw that can trigger an infinite loop/deny‑of‑service, and (2) malformed HTML/SNAC input leading to client crashes or hangs. CVE-2005-0472 covers the SNAC‑based DoS; CVE-2005-0473 is associated with HTML...

CAN-2004-1154

CVE-2004-1154 pertains to Samba (versions 2.0.0 through 3.0.9). The OpenVAS entries describe an integer overflow that enables remote code execution. Public details in the connected Nessus/OpenVAS items confirm Samba vulnerability exposure and reference patches (e.g., Solaris patch sets) that miti...

CAN-2005-0393

CVE-2005-0393 relates to crip 3.5: the helper scripts do not properly use temporary files, which can allow local users to cause an unknown impact with unknown attack vectors. The connected sources (OSV, NVD, Debian tracker, Red Hat entry, Debian/OSS plugins) confirm the same description. No speci...

CAN-2005-0157

The CVE-2005-0157 issue affects SmartList, affected in version 3.15 and earlier. The vulnerability arises from incorrect input handling in the confirm add-on, allowing an attacker to subscribe arbitrary e-mail addresses by manipulating a valid cookie that designates a different address than the o...

CAN-2005-0870

CVE-2005-0870 is associated with phpsysinfo, a PHP-based host-information utility, as reflected in multiple advisories (e.g., Debian DSA-724/897/898 and OpenVAS entries). The connected documents describe several issues: cross-site scripting (XSS) vulnerabilities (CVE-2005-0870) and related proble...

CAN-2005-0739

Technical details for CVE-2005-0739 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-0605

Technical details about CVE-2005-0605 are not provided in the supplied documents; linked entries reference the CVE but do not describe affected products, root cause, or fixes. Monitor for updates.

CAN-2005-1523

CVE-2005-1523 is a format-string vulnerability in the GNU Mailutils imap4d server (also reflected in Debian Gentoo advisories) that may allow a remote attacker to execute arbitrary code with the IMAP service privileges. The connected advisories describe that the issue stems from insufficient sani...

CAN-2005-1345

CVE-2005-1345 is associated with multiple Squid vulnerabilities described across openvas entries and CentOS/Red Hat advisories. The issues involve: (1) improper handling of access control lists that could allow an authorised remote user to gain more access than intended, (2) a flaw related to how...

CAN-2005-0523

The CVE-2005-0523 entry pertains to ProZilla (versions up to 1.3.7.3 and earlier). A format string vulnerability in the Location header allows remote attackers to execute arbitrary code with the user’s privileges. Debian’s DSA-719-1 and related advisories fix the issue by upgrading ProZilla to la...

CAN-2005-0892

CVE-2005-0892 describes a buffer overflow in Smail, a mail transfer agent. The public records specify a vulnerability in Smail 3.2.0.120 where a long string in the MAIL FROM command (and possibly other SMTP commands) can allow remote attackers or local users to execute arbitrary code. Public list...

CAN-2005-0525

Technical details for CVE-2005-0525 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-0392

CVE-2005-0392 maps to the Debian ppxp local privilege escalation. ppxp does not release root privileges when opening potentially user‑supplied log files, enabling a root shell under certain conditions. Debian advisories DSA-725-1/725-2 document fixes: upgrade to ppxp 0.2001080415-10sarge2 (and ne...

CAN-2005-1349

CVE-2005-1349 is a vulnerability in Convert::UUlib, the Perl interface to uulib, where a buffer overflow could allow remote code execution. Public sources describe exploits against the Convert-UUlib library and indicate affected packages include libconvert-uulib-perl (Debian) with fixes in DSA-72...

CAN-2005-0953

CVE-2005-0953 concerns a race-condition in the bzip2 compressor/decompressor (v1.0.2 and earlier). During decompression in a directory the attacker could manipulate permissions of an unrelated file the user has access to, enabling local privilege modification. A related issue, CVE-2005-1260, desc...

CAN-2005-1121

CVE-2005-1121 is documented in Debian DSA-726-1 for the Oops caching HTTP proxy server. The vulnerability is a format string issue in the MySQL/PgSQL authentication module, exploitable remotely and potentially allowing arbitrary code execution. Debian notes the fix in the oops package (version 1....

CAN-2005-1546

CVE-2005-1546 is a buffer overflow vulnerability in ht’s PE parser, affecting ht packages in Debian (and cited in DSA-743-1). The issue was fixed in ht 0.8.0-2sarge4 (and related updates for woody before that). The Debian advisories describe the vulnerability and recommend upgrading ht to mitigat...

CAN-2005-1934

CVE-2005-1934 affects the Gaim multi-protocol instant messaging client, where a malformed MSN Messenger message can cause memory allocation errors and crash the application. Connected advisories describe this as part of two DoS issues in Gaim and reference fixed-updates (e.g., upgrade to version ...

CAN-2005-1228

CAN-2005-1228 concerns gzip/gunzip path traversal when decompressing with the -N option. Public advisories (e.g., Debian DSA-752-1, FreeBSD SA-05:11.gzip, CentOS advisories) describe that untrusted archives can cause gunzip to overwrite files in arbitrary directories by failing to sanitize the ta...