CAN-2005-0064

CAN-2005-0064 pertains to a buffer overflow in Xpdf code (Decrypt::makeFileKey2) used by Xpdf and GPdf, enabling potential remote arbitrary-code execution via crafted PDF files. Debian’s DSAs/Ubuntu Gentoo Trustix advisories cite a fix in xpdf packages (upgrade to a newer Xpdf version) as the rem...

CAN-2004-1027

CVE-2004-1027 is a directory traversal vulnerability in unarj. The issue arises when extracting ARJ archives with the -x option; specially crafted archives can cause files to be created in the parent directory (…/.. paths) and, when used recursively, may overwrite critical system files. Publicly ...

CAN-2004-1264

CVE-2004-1264 affects the chbg utility. Debian/DSA-644-1 reports a local buffer overflow in chbg (config.c/simplify_path) that could allow arbitrary code execution when processing a crafted scenario file. The issue is exploitable remotely via a malicious configuration, with Debian indicating patc...

CAN-2005-0095

CVE-2005-0095 affects Squid: a vulnerability in the Web Cache Communication Protocol (WCCP) message parsing can trigger a memory access exception, potentially causing a denial-of-service. Exploitation is described as using a specially crafted WCCP I_SEE_YOU message to crash the Squid process. Rem...

CAN-2005-0071

The CVE-2005-0071 entry applies to Video Disk Recorder (VDR) prior to version 1.2.6. The vulnerability is that VDR did not securely create files, allowing a local attacker to overwrite arbitrary files via insecure file handling. Public records (OSV OSV-) summarize: vdr before 1.2.6 does not secur...

CAN-2004-1186

CVE-2004-1186 concerns the enscript utility and is documented across multiple feeds as having multiple issues in the same family: unsanitised input enabling arbitrary commands via EPSF pipe, lack of filename sanitisation leading to command execution, and multiple buffer overflows causing crashes....

CAN-2005-0102

CVE-2005-0102 affects Evolution (GNOME) via a flaw in camel-lock-helper. Connected advisories (Ubuntu USN-69-1, Debian DSA-673-1, Gentoo GLSA 200501-35, CentOS/CESA-2005:397) describe an integer/buffer handling issue in camel-lock-helper that could allow local privilege escalation or code executi...

CAN-2005-0074

CAN-2005-0074 corresponds to a buffer overflow in xpcd’s SVGA viewer pcdsvgaview (part of xpcd). The vulnerability arises from a fixed-size buffer overflow that can allow a local user to execute arbitrary code with elevated privileges. Debian’s DSA-676-1 fixes this by updating xpcd-svga to a patc...

CAN-2005-0159

CVE-2005-0159 affects the Debian toolchain-source package (tpkg-* scripts) where insecure temporary file usage allows a local attacker to overwrite arbitrary files via a symlink attack. The Debian security advisories (DSA-679-1) document that the fix is available in toolchain-source versions 3.0....

CAN-2005-0085

CVE-2005-0085 relates to a cross-site scripting vulnerability in htdig that can be exploited remotely. Public records in connected documents show multiple advisories across distros: Debian: DSA-680-1 and a corresponding Debian security advisory entry for htdig. SUSE: exists as a security update f...

CAN-2005-0100

The connected documents tie CVE-2005-0100 to Emacs across multiple advisories (Debian DSA-671-1, SLES9 Emacs update, Gentoo GLSA 200502-20, FreeBSD ports, Gentoo/Debian entries in OpenVAS). They provide CVSS context (base 7.5, vector AV:N/AC:L/Au:N/C:P/I:P/A:P) in OpenVAS entries, and mention upd...

CAN-2005-0363

CVE-2005-0363 affects AWStats (notably versions AWStats 4.0 and 6.2) where remote attackers can execute arbitrary commands via shell metacharacters in the config parameter, due to inadequate input sanitisation. The issue is a CGI/plugin input handling problem in AWStats, enabling remote command e...

CAN-2005-0070

CVE-2005-0070 affects synaesthesia (2.1 and earlier) where the binary, installed setuid root, does not drop privileges before processing user configuration and mixer files. The underlying issue is local privilege escalation that allows a local user to read arbitrary files. Debian's DSA-681-1 fixe...

CAN-2005-0107

The CVE-2005-0107 issue affects bsmtpd (a batched SMTP mailer used with sendmail/postfix) where 2.3 and earlier do not properly sanitize e-mail addresses, allowing remote command execution. Public advisories (e.g., Debian DSA-690-1) note remote exploitation and provide fixed packages (e.g., bsmtp...

CAN-2005-0099

CVE-2005-0099 concerns the SDL port of Abuse (abuse-SDL). The advisory detail shows that abuse-SDL before version 2.00 does not drop privileges when creating certain files, allowing local users to create or overwrite arbitrary files. Affected context includes Debian (DSA-691-1) and SUSE entries t...

CAN-2005-0390

CVE-2005-0390 corresponds to a buffer overflow in Axel (an HTTP/HTTPS download accelerator). The connected documents clearly describe a vulnerability in Axel before version 1.0b where the program’s handling of remote input (specifically in the HTTP redirection/conn.c path) can overflow a buffer a...

CAN-2005-0814

The CVE entry CVE-2005-0814 is connected to multiple advisories and vulnerability checks for the LSH (LSH/Lsh) family. Publicly cited details describe a remote DoS vulnerability affecting lshd in Lysator LSH 1.x/2.x prior to 2.0.1, with reports of issues in various platforms (e.g., FreeBSD ports,...

CAN-2005-1109

CVE-2005-1109 refers to JunkBuster, a HTTP proxy. The vulnerability (affecting JunkBuster before version 2.0.2-r3) arises from heap corruption due to inconsistent use of an internal function, enabling remote attackers to crash the daemon and potentially execute arbitrary code. Impact is a remote ...

CAN-2004-1341

CVE-2004-1341 is a cross-site scripting (XSS) vulnerability in info2www, due to missing input sanitising. The issue affects info2www prior to version 1.2.2.9, with fixed versions in Debian as 1.2.2.9-20woody (woody) and 1.2.2.9-23 (sid). Debian DSAs (DSA-711-1) document remote exploitation via cr...

CAN-2004-1154

CVE-2004-1154 pertains to Samba (versions 2.0.0 through 3.0.9). The OpenVAS entries describe an integer overflow that enables remote code execution. Public details in the connected Nessus/OpenVAS items confirm Samba vulnerability exposure and reference patches (e.g., Solaris patch sets) that miti...