8972 matches found
CAN-2005-2658
CVE-2005-2658 is a buffer overflow in Turquoise SuperStat (turqstat) prior to 2.2.x. Debian advisories describe remote exploitation via a crafted NNTP server that could execute arbitrary code. Public records cite fixed versions per distribution: 2.2.1woody1 (woody), 2.2.2sarge1 (sarge), and 2.2.4...
CAN-2005-2494
CVE-2005-2494 is addressed in multiple historical advisories, notably Red Hat RHSA-2006:0582 and CentOS/CESA-2006:0582 for kdebase. The issue is a lock-file handling flaw in kcheckpass that could allow privilege escalation if /var/lock is writable by a user allowed to run kcheckpass. A patch was ...
CAN-2005-2820
CAN-2005-2820 affects the courier/sqwebmail stack. The vulnerability arises from missing input sanitisation that, via Internet Explorer Conditional Comment handling in SqWebmail, can cause hidden JavaScript execution when a user views a malicious email. This is a remote cross-site scripting issue...
CAN-2005-2317
The CVE-2005-2317 entry concerns shorewall, a firewall tool. The issue is a programming error in shorewall that can allow bypass of MAC-based controls: when MACLIST_DISPOSITION is set to ACCEPT or MACLIST_TTL is non-zero, packets from hosts that fail or pass MAC verification could pass through th...
CAN-2005-2491
CVE-2005-2491 describes an integer overflow in the PCRE library that is embedded in Python (and is also referenced in Exim advisories). The vulnerability arises when processing specially crafted regular expressions, potentially allowing an attacker to execute arbitrary code with the privileges of...
CAN-2005-2876
CVE-2005-2876 is not a reserved placeholder in connected docs; multiple advisories (Debian DSA-825-1, Debian DSA-823-1, Gentoo GLSA 200509-15, SLES9, Slackware advisory) describe a bug in util-linux related to the mount utility that could allow local users to bypass filesystem access restrictions...
CAN-2005-2498
The connected OpenVAS/Gentoo/SuSE Slackware advisories reference CVE-2005-2498 in multiple contexts (Gentoo GLSA 200508-14 and 200508-18 for tikiwiki/egroupware; SLES9 PHP4 update; Slackware SSA entries). Reported CVSS base 7.5 in these records; no concrete exploit details or vulnerable versions ...
CAN-2005-2871
Summary (CVE-2005-2871) : A buffer/heap overflow in IDN hostname handling affects Mozilla Firefox and derivatives (e.g., Thunderbird). Improper processing of international domain names (IDN) can allow a remote attacker to cause a crash or execute arbitrary code in the user’s security context. The...
CAN-2005-3118
CVE-2005-3118 (CAN-2005-3118) affects the Mason firewall configuration tool. The vulnerability is a programming error where Mason does not install the init script to load the firewall on boot, leaving the system without a firewall after reboot. Affected: Mason before 1.0.0; Debian/DSA-845-1 notes...
CAN-2005-1229
Summary (CVE-2005-1229 family) The cpio utility is affected by multiple issues reported across advisories. The primary path traversal flaw (CVE-2005-1229) occurs when extracting archives with an unsafe pathname, even with --no-absolute-filenames, allowing an attacker to place files in arbitrary w...
CAN-2005-3150
CVE-2005-3150 affects the weex FTP client. A format string vulnerability could allow remote code execution. Debian/ Gentoo advisories note fixes: weex 2.6.1-6sarge1 (and 2.6.1-4woody2 for woody). Upgrading to the patched package is recommended; old versions are vulnerable. The issue is a remote v...
CAN-2005-1279
The CAN-2005-1279 entry corresponds to tcpdump vulnerabilities in the BGP dissector (RT_ROUTING_INFO handling) that can cause a denial of service via an infinite loop when processing crafted packets. Public advisories and patches exist across multiple distributions: Debian DSA-850-1/DSA-850 fix t...
CAN-2005-2367
This CVE (CAN-2005-2367) is part of a set of issues in Ethereal (network traffic analyser). Connected advisories confirm format-string vulnerabilities in several dissectors could allow remote code execution; other CVEs (2360–2366) primarily describe denial-of-service conditions. Remediation acros...
CAN-2005-2875
The CVE CAN-2005-2875 corresponds to Py2Play, a peer-to-peer game engine, where a design error allows remote code execution by processing untrusted pickled objects. Public advisories (Debian DSA-856-1 and related Debian/Nessus entries) describe that Py2Play can execute arbitrary code received fro...
CAN-2005-2967
CVE-2005-2967 is a format-string vulnerability in the CDDB processing component of the xine-lib library. Across multiple distributions (Debian, Ubuntu, Gentoo, Mandrake/Mandriva, FreeBSD ports, etc.), advisories describe that an attacker can cause arbitrary code execution by pointing a vulnerable...
CAN-2005-2933
CVE-2005-2933 is referenced in multiple advisories (RHSA-2006:0276, RHSA-2006:0501, CESA-2005:850, CESA-2006:0276) and is associated with a buffer overflow in the UW-IMAP c-client library used by IMAP/imapd. A specially crafted mailbox name could allow authenticated attackers to execute arbitrary...
CAN-2005-2958
The CVE-2005-2958 entry concerns the GNOME Data Access library libgda/libgda2. Two format string vulnerabilities in its logging routines could potentially allow arbitrary code execution in applications that use libgda. Diverse advisories (Debian DSA 871-1/871-2, Gentoo GLSA 200511-01, OpenVAS ent...
CAN-2005-2177
CVE-2005-2177 is associated with net-snmp. The connected advisories state a remote DoS in net-snmp where a specially crafted packet can crash the agent; Red Hat/CentOS notes this under RHSA-2005:395 with a patch update. A related issue, CVE-2005-1740, concerns insecure temporary files that could ...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1709. Reason: This candidate is a duplicate of CVE-2024-1709. Notes: All CVE users should reference CVE-2024-1709 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...