CAN-2004-0987

CVE-2004-0987 affects yardradius, a YARD radius authentication/server. The vulnerability is a stack/remote buffer overflow in the process_menu function (yardradius 1.0.20 and earlier), allowing remote attackers to execute arbitrary code with root/system privileges. Public sources (NVD/CVE entries...

CAN-2002-1132

SquirrelMail vulnerability CVE-2002-1132: versions up to 1.2.7 and earlier allow remote attackers to determine the absolute pathname of options.php via a malformed optpage argument, leading to information disclosure. Debian advisories state the fix is in version 1.2.6-1.2 for woody and 1.2.8-1.1 ...

CAN-2003-0972

Mode C: The CAN-2003-0972 entry corresponds to the Debian screen local vulnerability (integer overflow) affecting screen, a VT100/ANSI terminal multiplexer. The connected advisories describe an exploitable condition causing local privilege escalation by overflowing buffers through crafted escape ...

CAN-2004-1000

CVE-2004-1000 (lintian) concerns the Debian lintian checker: it removes the working directory even if it wasn’t created at program start, enabling a local attacker to delete arbitrary files via a symlink attack. This insecure temporary-directory behavior is the root cause. Remediations are provid...

CAN-2004-1076

CVE-2004-1076 affects the Atari800 emulator. The provided sources describe multiple buffer overflows in the RtConfigLoad function in rt-config.c, affecting versions before 1.3.4, allowing local users to execute arbitrary code via large values in the configuration file. Exploitation details are no...

CAN-2004-0994

CVE-2004-0994 refers to multiple integer overflows in xzgv (0.8 and earlier) in image processing, notably in read_prf.c/read_prf handling, which can lead to remote code execution via crafted images. Related documents (GLSA-200501-09, OpenVAS entries, and NVD) confirm the issue and classify the im...

CAN-2004-0968

CVE-2004-0968 affects the GNU C Library (glibc). The vulnerability arises from the catchsegv (and related glibcbug) scripts in glibc 2.3.2 and earlier, enabling a local user to overwrite files via a symlink attack on temporary files. Multiple connected entries (CentOS GLSA, Debian DSA, Red Hat/US...

CAN-2004-1183

CVE-2004-1183 is a documented integer overflow in the tiffdump utility of libtiff (affecting versions prior to the patch). Several advisories (Ubuntu USN-54-1, Red Hat RHSA-2005:035, Gentoo GLSA-200501-06, SUSE-SA:2005:001, Debian/others) describe that processing carefully crafted TIFF images can...

CAN-2004-1189

CVE-2004-1189 is a legitimate Kerberos (krb5) vulnerability affecting multiple platforms (Ubuntu, Debian, Gentoo, FreeBSD, etc.). The issue is described as a buffer overflow in the add_to_history() function of the MIT Kerberos 5 implementation, which could allow an authenticated attacker to execu...

CAN-2005-0016

CVE-2005-0016 describes a buffer overflow in the exported_display function of xatitv in gatos before 0.0.5, allowing local users to execute arbitrary code. The available sources (NVD/OSV/CVE lists and SUSE/OSVDebian/etc.) confirm the affected component and the local-code-execution impact. The pro...

CAN-2004-1182

HylaFAX contains a vulnerability in hfaxd (CVE-2004-1182) where, if a weak hosts.hfaxd file is used, a remote attacker can authenticate by supplying a crafted username or hostname that matches a regex against the hosts.hfaxd entry without a password. Affected: HylaFAX with weak hosts.hfaxd config...

CAN-2005-0021

CVE-2005-0021 and CVE-2005-0022 affect Exim MTA. The host_aton() function overflows a buffer when given an illegal IPv6 address with more than 8 components, potentially allowing local code execution. The spa_base64_to_bits() function (SPA authentication) overflows a buffer, potentially enabling a...

CAN-2004-1264

CVE-2004-1264 affects the chbg utility. Debian/DSA-644-1 reports a local buffer overflow in chbg (config.c/simplify_path) that could allow arbitrary code execution when processing a crafted scenario file. The issue is exploitable remotely via a malicious configuration, with Debian indicating patc...

CAN-2005-0095

CVE-2005-0095 affects Squid: a vulnerability in the Web Cache Communication Protocol (WCCP) message parsing can trigger a memory access exception, potentially causing a denial-of-service. Exploitation is described as using a specially crafted WCCP I_SEE_YOU message to crash the Squid process. Rem...

CAN-2005-0018

CVE-2005-0018 corresponds to the f2c package (version 3.1) where the f2 shell script allows local users to read arbitrary files via a symlink attack on temporary files. Multiple connected sources (SU​SE CVE entry, Debian/DSA alerts, NVD/OSV entries) confirm this vulnerability affecting the f2c/ f...

CAN-2005-0102

CVE-2005-0102 affects Evolution (GNOME) via a flaw in camel-lock-helper. Connected advisories (Ubuntu USN-69-1, Debian DSA-673-1, Gentoo GLSA 200501-35, CentOS/CESA-2005:397) describe an integer/buffer handling issue in camel-lock-helper that could allow local privilege escalation or code executi...

CAN-2005-0074

CAN-2005-0074 corresponds to a buffer overflow in xpcd’s SVGA viewer pcdsvgaview (part of xpcd). The vulnerability arises from a fixed-size buffer overflow that can allow a local user to execute arbitrary code with elevated privileges. Debian’s DSA-676-1 fixes this by updating xpcd-svga to a patc...

CAN-1999-1572

CVE-1999-1572 is a historic issue in GNU cpio where using the -O option sets a 0 umask, creating output files with mode 0666 (world-readable/writable). Connected advisories across Debian, RHEL, Ubuntu, CentOS, Gentoo, and others confirm the impact on cpio packages and reference CVE-1999-1572 (wit...

CAN-2005-0100

The connected documents tie CVE-2005-0100 to Emacs across multiple advisories (Debian DSA-671-1, SLES9 Emacs update, Gentoo GLSA 200502-20, FreeBSD ports, Gentoo/Debian entries in OpenVAS). They provide CVSS context (base 7.5, vector AV:N/AC:L/Au:N/C:P/I:P/A:P) in OpenVAS entries, and mention upd...

CAN-2005-0363

CVE-2005-0363 affects AWStats (notably versions AWStats 4.0 and 6.2) where remote attackers can execute arbitrary commands via shell metacharacters in the config parameter, due to inadequate input sanitisation. The issue is a CGI/plugin input handling problem in AWStats, enabling remote command e...