CAN-2005-1349

CVE-2005-1349 is a vulnerability in Convert::UUlib, the Perl interface to uulib, where a buffer overflow could allow remote code execution. Public sources describe exploits against the Convert-UUlib library and indicate affected packages include libconvert-uulib-perl (Debian) with fixes in DSA-72...

CAN-2005-0753

CVE-2005-0753 is a buffer overflow in CVS servers that process version/author data, potentially allowing remote code execution. Affected: CVS server (not clients) across multiple platforms; impact described as remote arbitrary code execution, depending on access method. Public details in Debian/F...

CAN-2005-1858

This CVE affects FUSE (filesystem in userspace): FUSE 2.x before 2.3.0 fails to clear memory from unfilled pages after a read returns a short byte count, potentially allowing local users to disclose sensitive information. The Debian advisory (DSA-744-1) links CVE-2005-1858 to fuse and notes a fix...

CAN-2005-2654

CVE-2005-2654 affects phpldapadmin and allows anonymous access to the LDAP server via login.php with anonymous_bind, even when disable_anon_bind is configured. Related advisories (Debian DSA-790-1, Gentoo GLSA 2005-09-04) describe authentication bypass for phpldapadmin and note updates/upgrades (...

CAN-2005-1853

CVE-2005-1853 affects the Gopher client (gopher.c) in version 3.0.5, where improper creation of temporary files permits local users to gain privileges. Multiple sources (Red Hat advisory, CVE listing, Debian/Debian OSSVOS) confirm the flaw and its local-privilege elevation impact. Debian’s DSA-77...

CAN-2005-1852

CAN-2005-1852 is an integer overflow in libgadu (Gadu library) that affects Kopete/Kdenetwork and ekg-related components. A remote attacker could send specially crafted Gadu-Gadu messages to trigger the overflow, potentially crashing the involved application or executing arbitrary code. Public ad...

CAN-2005-1916

CVE-2005-1916 is evidenced in multiple advisory feeds tied to ekg (Gadu client) vulnerabilities. The issue arises from insecure temporary file creation and an arbitrary command execution path in a contributed script, enabling a local attacker to exploit the vulnerability. Debian’s DSA-760-1 and U...

CAN-2005-2161

CVE-2005-2161 maps to a phpBB2 XSS issue. The Debian advisory (DSA-768-1) reports a remote cross-site scripting vulnerability in phpBB2 (missing input validation) that can inject arbitrary script via nested tags. Affected product: phpBB2; root cause: missing input validation leading to XSS. Remed...

CAN-2005-1937

CVE-2005-1937 appears across multiple advisories tied to Mozilla/Firefox components. Connected documents show CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and references in Ubuntu USN-149-1, Debian DSA-810-1, Gentoo GLSA 200507-24, FreeBSD ports Firefox advisories. Affected products include Firefox...

CAN-2005-2761

CVE-2005-2761 is associated with phpGroupWare and is documented in Debian DSA-798-1 and related OpenVAS entries. The vulnerability refers to a global cross-site scripting fix designed to protect against malicious scripts embedded in CSS and xmlns across various phpGroupWare components. Remediatio...

CAN-2005-1532

CVE-2005-1532 is a vulnerability in Mozilla-based applications (Mozilla Suite/Firefox/Thunderbird) caused by insufficient validation in handling JavaScript eval and Script objects, enabling remote code execution with the privileges of the logged-in user. Public advisories reference this CVE along...

CAN-2005-2088

The connected Nessus document lists CVE-2005-2088 as an HTTP Request Smuggling issue in Apache httpd when acting as a proxy: Apache 1.3.x before 1.3.34 and 2.0.x before 2.0.55 are vulnerable to crafted requests with both Transfer-Encoding: chunked and Content-Length headers, leading to misinterpr...

CAN-2005-2627

CAN-2005-2627 and CAN-2005-2626 affect the kismet wireless sniffer. The Debian/OSS advisories describe CAN-2005-2627 as multiple integer underflows that could allow remote code execution, and CAN-2005-2626 as insecure handling of unprintable SSID characters. OpenVAS entries mirror these issues an...

CAN-2005-2101

CVE-2005-2101 concerns the KDE kdeedu suite, where the lange n2kvhtml converter (langen2kvhtml) creates insecure temporary files in /tmp with predictable names. This local-privilege issue allows a non-privileged user to potentially overwrite files, as described in Debian security advisories (DSA-...

CAN-2005-2536

CVE-2005-2536 affects pstotext, which failed to use Ghostscript -dSAFER, allowing remote attackers to exploit malformed PostScript/PDF files to execute arbitrary commands. The issue is documented in Debian DSA-792-1 and OSSC/NASL entries, stating that pstotext did not invoke -dSAFER and that fixe...

CAN-2005-2496

CVE-2005-2496 is an ntp privilege-escalation issue caused when ntpd is run with the -u option using a string to specify the group, causing it to run with the user’s group ID instead of the intended group. Public advisories (RHSA-2006:0393, DSA-801-1, CES A-2006:0393, USN/OSV references) document ...

CAN-2005-2658

CVE-2005-2658 is a buffer overflow in Turquoise SuperStat (turqstat) prior to 2.2.x. Debian advisories describe remote exploitation via a crafted NNTP server that could execute arbitrary code. Public records cite fixed versions per distribution: 2.2.1woody1 (woody), 2.2.2sarge1 (sarge), and 2.2.4...

CAN-2005-2495

The CVE 2005-2495 entry is corroborated by the connected Nessus plugins for Solaris 10, which identify X11/Xsun (X11 6.6.2) as the affected component and enumerate patch-based mitigations. Affected products include Solaris 10 on x86 and SPARC; vulnerable component is Xsun (X11 6.6.2). The underly...

CAN-2005-2494

CVE-2005-2494 is addressed in multiple historical advisories, notably Red Hat RHSA-2006:0582 and CentOS/CESA-2006:0582 for kdebase. The issue is a lock-file handling flaw in kcheckpass that could allow privilege escalation if /var/lock is writable by a user allowed to run kcheckpass. A patch was ...

CAN-2005-2534

Affected software: OpenVPN (Windows and other platforms) with versions prior to 2.0.1. Vulnerabilities tied to CVE-2005-2531 to CVE-2005-2534 involve denial-of-service scenarios due to programming errors in certificate handling, packet decryption, dev tap memory exhaustion, and the --duplicate-cn...