CAN-2005-2657

CVE-2005-2657 corresponds to a design-error in common-lisp-controller (versions 4.18 and earlier) that allows a local user to compile malicious code into a cache directory, which can be executed by another user who has not run Common Lisp before. Public advisories (DSA-811-1/2) describe a local p...

CAN-2005-2496

CVE-2005-2496 is an ntp privilege-escalation issue caused when ntpd is run with the -u option using a string to specify the group, causing it to run with the user’s group ID instead of the intended group. Public advisories (RHSA-2006:0393, DSA-801-1, CES A-2006:0393, USN/OSV references) document ...

CAN-2005-2796

CVE-2005-2796 is part of multiple advisories affecting Squid (notably Debian DSA-809-1 and Gentoo/CentOS advisories). The publicly documented issues include: (1) a denial of service via specially crafted requests (CVE-2005-2796) and (2) an additional related issue (CVE-2005-2794) involving aborte...

CAN-2005-2411

The CVE-2005-2411 entry concerns tDiary, a weblog system. A CSRF-design error in tdiary allowed remote attackers to perform actions as another user and execute commands on the server when a user visiting a malicious URL. Publicly referenced in Debian security advisories (DSA-808-1) and related OS...

CAN-2005-2920

ClamAV (libclamav) is affected by CVE-2005-2920 due to a buffer overflow when handling UPX-packed executables in libclamav/upx.c. The vulnerability could allow remote code execution with the privileges of the ClamAV process by processing specially crafted UPX-packed files, as reported in multiple...

CAN-2005-2672

CVE-2005-2672 concerns the lm_sensors project, where a bug in the pwmconfig tool creates a temporary file insecurely, allowing potential tampering. Documented in multiple advisories (Debian DSA-814-1, Red Hat RHSA-2005:825, CentOS CESA-2005:825, Fedora 2005-1054/1053), the issue affects lm_sensor...

CAN-2005-2494

CVE-2005-2494 is addressed in multiple historical advisories, notably Red Hat RHSA-2006:0582 and CentOS/CESA-2006:0582 for kdebase. The issue is a lock-file handling flaw in kcheckpass that could allow privilege escalation if /var/lock is writable by a user allowed to run kcheckpass. A patch was ...

CAN-2005-2918

The CVE-2005-2918 entry relates to gtkdiskfree, a GNOME tool for showing free disk space. The vulnerability is insecure temporary file creation in gtkdiskfree, which could allow a local attacker to overwrite a file with the caller’s privileges. Affected package: gtkdiskfree. Public advisories (DS...

CAN-2005-2820

CAN-2005-2820 affects the courier/sqwebmail stack. The vulnerability arises from missing input sanitisation that, via Internet Explorer Conditional Comment handling in SqWebmail, can cause hidden JavaScript execution when a user views a malicious email. This is a remote cross-site scripting issue...

CAN-2005-2317

The CVE-2005-2317 entry concerns shorewall, a firewall tool. The issue is a programming error in shorewall that can allow bypass of MAC-based controls: when MACLIST_DISPOSITION is set to ACCEPT or MACLIST_TTL is non-zero, packets from hosts that fail or pass MAC verification could pass through th...

CAN-2005-2491

CVE-2005-2491 describes an integer overflow in the PCRE library that is embedded in Python (and is also referenced in Exim advisories). The vulnerability arises when processing specially crafted regular expressions, potentially allowing an attacker to execute arbitrary code with the privileges of...

CAN-2005-2534

Affected software: OpenVPN (Windows and other platforms) with versions prior to 2.0.1. Vulnerabilities tied to CVE-2005-2531 to CVE-2005-2534 involve denial-of-service scenarios due to programming errors in certificate handling, packet decryption, dev tap memory exhaustion, and the --duplicate-cn...

CAN-2005-2794

CVE-2005-2794 is referenced in multiple OpenVAS entries tied to Squid. The connected documents indicate a vulnerability in Squid where certain aborted requests that trigger an assert may allow remote attackers to cause a denial of service, with CVE-2005-2796 also noted in several advisories. Thes...

CAN-2005-1849

Summary of CVE-2005-1849 : The vulnerability affects the zlib library (notably version 1.2.2) where the inflating of certain invalid input can cause a crash due to an invalid or oversized dynamic tree, enabling a denial of service. This is documented in multiple connected sources (e.g., F5 adviso...

CAN-2005-2876

CVE-2005-2876 is not a reserved placeholder in connected docs; multiple advisories (Debian DSA-825-1, Debian DSA-823-1, Gentoo GLSA 200509-15, SLES9, Slackware advisory) describe a bug in util-linux related to the mount utility that could allow local users to bypass filesystem access restrictions...

CAN-2005-2917

CVE-2005-2917 affects the Squid proxy server. The issue stems from improper handling of certain NTLM authentication requests, allowing a remote attacker to terminate the Squid process and temporarily disrupt proxy services (DoS). The vulnerability is documented across multiple advisories (Debian ...

CAN-2005-2961

CVE-2005-2961 describes a remote code execution risk in prozilla (ProZilla) due to a buffer overflow in the get_string_ahref function when the -ftpsearch option is used. Public sources identify affected versions as ProZilla 1.3.7.4 and possibly earlier; exploitation would occur via a crafted stri...

CAN-2005-2772

CVE-2005-2772 affects the gopher client. Debian advisory DSA-832-1 reports remote buffer overflow vulnerabilities that can be triggered by a malicious Gopher server, with fixes applied in gopher 3.0.7sarge2 (and earlier 3.0.3woody4) across woody/sarge releases. The associated Nessus/NVD/OSV refer...

CAN-2005-2558

CAN-2005-2558 corresponds to a MySQL CREATE FUNCTION init_syms Buffer Overflow vulnerability. The core issue is improper boundary handling when processing CREATE FUNCTION statements in the MySQL UDF mechanism, allowing a remote attacker who has certain privileges on the MySQL server to cause a de...

CAN-2005-2878

CVE-2005-2878 : A format-string vulnerability exists in GNU mailutils imap4d’s handling of IMAP SEARCH commands. An authenticated attacker could execute arbitrary code on the target system with the imap4d privileges. Affected products: mailutils imap4d (Debian, Gentoo GLSA, etc.). Root cause: ins...