CAN-2005-0753

CVE-2005-0753 is a buffer overflow in CVS servers that process version/author data, potentially allowing remote code execution. Affected: CVS server (not clients) across multiple platforms; impact described as remote arbitrary code execution, depending on access method. Public details in Debian/F...

CAN-2005-1848

CVE-2005-1848 corresponds to a denial-of-service flaw in the dhcpcd DHCP client daemon caused by an out-of-bounds read from a crafted DHCP packet, leading to a crash. Affected products are various Linux distributions that package dhcpcd, with multiple advisories referencing the issue (Red Hat RHS...

CAN-2005-2040

CVE-2005-2040 pertains to the Heimdal Kerberos implementation. Public details in connected docs indicate a buffer overflow in the Heimdal telnet server that could allow remote code execution, with references in Debian advisory DSA-758-1 and FreeBSD/OpenVAS entries. The advisories caution that aff...

CAN-2005-1992

CVE-2005-1992 concerns Ruby’s XMLRPC server, where an insecure default in utils.rb (and related XMLRPC.iPIMethods handling) can allow a remote attacker to execute arbitrary commands if the server is used in a vulnerable configuration. Public advisories (e.g., RHSA-2005:543, USN-146-1) document th...

CAN-2005-1853

CVE-2005-1853 affects the Gopher client (gopher.c) in version 3.0.5, where improper creation of temporary files permits local users to gain privileges. Multiple sources (Red Hat advisory, CVE listing, Debian/Debian OSSVOS) confirm the flaw and its local-privilege elevation impact. Debian’s DSA-77...

CAN-2005-1914

CVE-2005-1914 affects CenterICQ 4.20.0 and earlier. The vulnerability arises because CenterICQ creates temporary files with predictable filenames, enabling local attackers to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file. The available connected documents confi...

CAN-2005-1519

CVE-2005-1519 concerns Squid Web Proxy Cache and arises from a flaw in DNS lookup processing that allows an attacker to spoof DNS responses and poison a target’s DNS cache. The issue stems from predictable DNS transaction identifiers used by Squid, enabling remote exploitation when the DNS client...

CAN-2005-1544

CVE-2005-1544 corresponds to a stack-based buffer overflow in libtiff that could allow remote code execution when processing malformed TIFF files. Public advisories (Debian DSA-755-1, Ubuntu USN-130-1, Mandrake MDKSA-2006:042, etc.) document this as a remote vulnerability affecting libtiff across...

CAN-2005-1686

CVE-2005-1686 is a format-string vulnerability in gedit (GNOME text editor) affecting multiple platforms. Connected advisories note a flaw in gedit’s filename handling that could permit arbitrary code execution. Public fixes exist across affected OS families, including Solaris patches (e.g., 1202...

CAN-2005-1916

CVE-2005-1916 is evidenced in multiple advisory feeds tied to ekg (Gadu client) vulnerabilities. The issue arises from insecure temporary file creation and an arbitrary command execution path in a contributed script, enabling a local attacker to exploit the vulnerability. Debian’s DSA-760-1 and U...

CAN-2005-2320

CVE-2005-2320 affects the WebCalendar PHP-based calendar. Multiple sources (RH CVE entry and Debian security advisories) describe an authorization failure where accessing the file assistant_edit.php can disclose sensitive information to unauthorized users. The OpenVAS entries reference related ad...

CAN-2005-2277

CVE-2005-2277 affects Nokia Affix BTFTP (Bluetooth FTP client) in AS platforms; root cause is missing input sanitisation before executing shell commands, allowing remote attackers to run arbitrary commands via shell metacharacters in the PUT filename. Affected: Affix BTFTP 2.1.2 and 3.2.0. Mitiga...

CAN-2005-2302

PowerDNS (pdns) versions before 2.9.18 are affected by CAN-2005-2302. When recursion is allowed only for a restricted IP range, the server may mishandle queries from clients denied recursion, causing a temporary blanking of answers for clients that are permitted to recurse. This description is su...

CAN-2005-0469

CVE-2005-0469 is a reported buffer overflow in the LINEMODE handling of telnet clients. Several BSD-based telnet clients exhibit a vulnerability in the slc_add_reply function that can be triggered by a reply containing a large number of SLC commands, potentially allowing remote code execution. Th...

CAN-2005-1854

CVE-2005-1854 corresponds to a Debian apt-cacher remote command execution vulnerability (missing input sanitising) affecting Debian 3.1. Exploitation could allow remote code execution as user www-data on the caching host. Debian fixed this in apt-cacher versions 0.9.4sarge1 and 0.9.10 for sid, wi...

CAN-2005-2724

CVE-2005-2724 is a real cross-site scripting (XSS) issue in SqWebmail, part of the Courier suite. The vulnerability arises from missing input sanitising in the handling of file attachments, enabling a remote attacker to inject script/HTML that may execute in a user’s browser when attachments are ...

CAN-2005-2370

CVE-2005-2370 is a memory-alignment related denial-of-service in the Gadu-Gadu component (libgadu/ekg) used by ekg/gaim. Affected architectures include SPARC; impact is remote DoS/crash. Debian/Ubuntu advisories document multiple releases affected (Sarge, Etch, Sid) and provide patches in ekg pac...

CAN-2005-2231

CVE-2005-2231 is linked to the heartbeat component in High-Availability Linux deployments. Debi an advisory DSA-761-1/761-2 describes insecure temporary file creation in heartbeat, with fixes provided for older Debian releases (e.g., 1.2.3-9sarge2 for sarge). OpenVAS entries (Debian DSA, Gentoo G...

CAN-2005-2335

CVE-2005-2335 describes a buffer overflow in fetchmail’s POP3 UIDL handling code. The vulnerability could allow a malicious POP3 server to crash fetchmail or execute arbitrary code with the user’s privileges. Connected advisories (Debian DSA/DSA-774-1, Ubuntu USN-153-1, CentOS/RHSA, Mandrake/MKDS...

CAN-2005-1937

CVE-2005-1937 appears across multiple advisories tied to Mozilla/Firefox components. Connected documents show CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and references in Ubuntu USN-149-1, Debian DSA-810-1, Gentoo GLSA 200507-24, FreeBSD ports Firefox advisories. Affected products include Firefox...