Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Open redirect

Rejected reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not in the allowed scope of that CNA's CVE ID assignments...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

UBUNTU-CVE-2024-25760

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

PT-2024-21640 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate was withdrawn by its CNA due to being out of scope for their CVE ID assignments. Recommendations: At the moment, there is no information about a newer version tha...

CAN-2004-0017

CVE-2004-0017 is for phpGroupWare and covers multiple SQL injection vulnerabilities in the calendar and infolog modules caused by insufficient sanitization/non-escaping of user-supplied data. Affected software is phpGroupWare (around version 0.9.14). Debian DSA-419-1 notes fixes in woody (0.9.14-...

CAN-2004-0047

CVE-2004-0047 corresponds to a local privilege escalation in the trr19 type trainer for GNU Emacs. Several disclosures (Debian DSA-430, Ubuntu CVE page, NVD) describe that multiple programs in trr19 1.0 do not drop privileges before executing a command, allowing local users to gain privileges (gr...

CAN-2004-0178

Technical details for CVE-2004-0178 are not publicly provided in the supplied documents; no affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from connected advisories.

CAN-2004-0232

CVE-2004-0232 is referenced in multiple security feeds as a vulnerability in Midnight Commander (mc). Connected documents describe the issue as involving buffer overflows, format string bugs, and insecure temporary file handling within mc, with CVE-2004-0226/0231/0232 grouped together in advisori...

CAN-2004-0755

CVE-2004-0755 relates to Ruby CGI::Session's FileStore creating session files with insecure permissions, potentially allowing session information leakage. The JVN entry describes the issue, noting improper file permissions in CGI::Session FileStore. Fedo ra advisories mention a security fix and p...

CAN-2004-0693

The connected records show CVE-2004-0691/0692/0693 tied to a Qt-related security issue and multiple advisories (Qt security updates across Linux distros such as SLES, Gentoo, FreeBSD ports, Slackware). These entries indicate a vulnerability in Qt that prompted security advisories and the need for...

CAN-2004-0833

CVE-2004-0833 affects sendmail on Debian GNU/Linux where the sasl-bin integration leaves a fixed username/password in the SASL database configuration. This misconfiguration could allow remote attackers to use Sendmail as an open mail relay and send spam messages. Public references include Debian ...

CAN-2004-0802

Multiple connected entries reference CVE-2004-0802 in imlib2 (notably Debian DSA-552-1 and FreeBSD/OpenVAS entries). The Debian advisory lists CVSS base 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P). Descriptions indicate that a missing update is the issue, but no concrete root-cause, vulnerable versions, or ...

CAN-2004-0837

MODE C The CVE CAN-2004-0837 (CVE-2004-0837) has concrete OpenVAS/related advisories tying it to MySQL in multiple decks. Affected entries/drivers include: SUSE/SLES9 (Security update for MySQL; CVSS 10.0; patches 120293-02, 120292-02), Gentoo GLSA 200410-22 (MySQL), Gentoo/OpenVAS entries refere...

CAN-2004-0884

CVE-2004-0884 corresponds to a Cyrus-SASL related issue. Multiple OpenVAS and vendor advisories indicate that remote systems using Cyrus SASL libraries may be affected unless updates are applied. A notable FreeBSD entry highlights a potential privilege escalation vector: libraries loaded via SASL...

CAN-2004-0886

CVE-2004-0886 concerns integer overflow bugs in libtiff used by the kdegraphics/kfax code path. The issue could allow memory corruption or arbitrary code execution when a user opens a crafted TIFF file, due to overflows in libtiff’s processing. The affected product is kdegraphics (and its kfax co...

CAN-2004-1006

CVE-2004-1006 is a format-string vulnerability in ISC DHCP’s dhcpd log/error handling (errwarn.c) that may allow remote code execution via crafted DNS messages on vulnerable DHCP servers/relays/clients. Public OpenVAS entries label isc-dhcpd format-string vulnerabilities with CVSS 10.0 (AV:N/AC:L...

CAN-2004-0645

CVE-2004-0645 affects abiword via a vulnerability in the wv library (buffer overflow) that could allow arbitrary code execution. The connected advisories (Debian DSA-579-1, Debian DSA-579-1 variants, and Gentoo/OpenVAS entries) confirm the issue and indicate the vulnerable component as abiword wi...

CAN-2004-1001

CVE-2004-1001 concerns the Shadow project: a vulnerability in the passwd_check function present in Shadow 4.0.4.1 and possibly earlier versions (before 4.0.5) that can allow local users to perform unauthorized actions when pam_chauthtok error handling is faulty. Public advisories (Debian DSA-585-...