CAN-2005-2660

CVE-2005-2660 affects apachetop (versions 0.12.5 and earlier). The issue arises when apachetop runs in debug mode: it creates a temporary file insecurely in /tmp (atop.debug), which can be targeted by a local attacker via a symlink attack to overwrite arbitrary files with the webserver/user runni...

CAN-2005-3118

CVE-2005-3118 (CAN-2005-3118) affects the Mason firewall configuration tool. The vulnerability is a programming error where Mason does not install the init script to load the firewall on boot, leaving the system without a firewall after reboot. Affected: Mason before 1.0.0; Debian/DSA-845-1 notes...

CAN-2005-2367

This CVE (CAN-2005-2367) is part of a set of issues in Ethereal (network traffic analyser). Connected advisories confirm format-string vulnerabilities in several dissectors could allow remote code execution; other CVEs (2360–2366) primarily describe denial-of-service conditions. Remediation acros...

CAN-2005-2875

The CVE CAN-2005-2875 corresponds to Py2Play, a peer-to-peer game engine, where a design error allows remote code execution by processing untrusted pickled objects. Public advisories (Debian DSA-856-1 and related Debian/Nessus entries) describe that Py2Play can execute arbitrary code received fro...

CAN-2005-2967

CVE-2005-2967 is a format-string vulnerability in the CDDB processing component of the xine-lib library. Across multiple distributions (Debian, Ubuntu, Gentoo, Mandrake/Mandriva, FreeBSD ports, etc.), advisories describe that an attacker can cause arbitrary code execution by pointing a vulnerable...

CAN-2005-2933

CVE-2005-2933 is referenced in multiple advisories (RHSA-2006:0276, RHSA-2006:0501, CESA-2005:850, CESA-2006:0276) and is associated with a buffer overflow in the UW-IMAP c-client library used by IMAP/imapd. A specially crafted mailbox name could allow authenticated attackers to execute arbitrary...

CAN-2005-3121

CVE-2005-3121 affects the module-assistant tool; a rule file before 0.9.10 creates a temporary file insecurely, allowing local users to perform unauthorized operations. Debian notes fixed in 0.9.10 (DSA-867-1) and provides upgrade guidance. Open questions remain about real-world exploitation deta...

CAN-2005-2177

CVE-2005-2177 is associated with net-snmp. The connected advisories state a remote DoS in net-snmp where a specially crafted packet can crash the agent; Red Hat/CentOS notes this under RHSA-2005:395 with a patch update. A related issue, CVE-2005-1740, concerns insecure temporary files that could ...

CVE-2103-2929

CVE-2013-2929 is a Linux kernel flaw in the get_dumpable() function of the ptrace subsystem that could lead to information disclosure on systems where fs.suid_dumpable is set non-default. Debian lists this CVE among many in DSA-2906-1 and notes a fixed package for oldstable (2.6.32-48squeeze5). A...

CVE-2022-435052023

The connected Broadcom advisory references BIOS firmware vulnerabilities on some Intel processors that could permit privilege escalation, information disclosure, or denial of service. Intel’s advisory (INTEL-SA-00813) indicates firmware updates are being released to mitigate these issues. The adv...

CVE-2011-2390

In CVE-2011-2390, Ubuntu describes a misconfiguration in the kdump/mkdumprd OpenSSH integration where the default StrictHostKeyChecking is set to no. This enables a remote attacker controlling a malicious kdump server to impersonate the legitimate server and access security sensitive information ...

CVE-2015-3413

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2015-3413 from Ubuntu/OSV references.

CVE-2015-4663

Technical details are not publicly available in the provided documents. Monitor for updates from Ubuntu or OSV entries for CVE-2015-4663.

CVE-2016-1552

Technical details for CVE-2016-1552 are not publicly available in the provided documents. The connected Nessus/Ubuntu entries indicate an unpatched status but do not specify affected products, root cause, or fixes. Monitor for updates.

CVE-2020-17582

Technical details for CVE-2020-17582 are not publicly available in the provided documents. Monitor for updates; no affected products, impact, or remediation information can be stated from the supplied data.

CVE-2021-0448

Technical details for CVE-2021-0448 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the linked sources (Ubuntu, Nessus, OSV, UB) to obtain concrete information.

CVE-2022-20003

Technical details are not publicly available in the provided documents for CVE-2022-20003. Connected sources show reports/mentions (Debian/Ubuntu/CNNVD) with no explicit vulnerability specifics. Monitor for updates.

CVE-2023-40322

CVE-2023-40322 relates to Moodle and involves an insufficient access check that can allow access to other users’ message data. Connected sources indicate Moodle versions affected include pre-3.9.23, pre-3.11.16 for 3.11.x, pre-4.0.10 for 4.0.x, pre-4.1.5 for 4.1.x, and pre-4.2.2 for 4.2.x. Some N...

CVE-2023-40318

CVE-2023-40318 is documented in connected Nessus and Ubuntu records as an unpatched vulnerability affecting Linux/Ubuntu packages, with no vendor patch available at the time of assessment. Ubuntu reference shows an entry for CVE-2023-40318; Nessus plugin UNPATCHED_CVE_2023_40318.NASL states Ubunt...

CVE-2023-40317

CVE-2023-40317 is described in the connected documents as a Moodle remote code execution vulnerability caused by parsing file repository references. The available sources do not provide concrete patch/version details in the CVE entry itself; one NASL/Nessus note indicates unpatched status for Ubu...