CAN-2004-0411

CVE-2004-0411 is referenced across multiple advisories (Gentoo GLSA 200405-11, Debian DSA 518-1, Slackware SSA:2004-238-01, Gentoo GLSA 200405-11, FreeBSD/OPenVAS entries) as affecting kdelibs. OpenVAS entries assign a CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and describe the host as missing up...

CAN-2004-0077

CVE-2004-0077 is referenced in multiple Linux kernel security advisories (e.g., Debian DSA 442-1 and GLSA 200403-02) attached to OpenVAS entries, indicating a kernel vulnerability in the 2.4.x lineage across architectures (e.g., s390, mips, ia64). The OpenVAS data shows CVSS base score 7.2 with v...

CAN-2004-0418

CVE-2004-0418 is a vulnerability in the CVS server (CVS) where serve_notify() may perform an out-of-bounds write (single-byte) when handling data lines, potentially enabling arbitrary code execution. The linked advisories/document set (FreeBSD, Debian, Gentoo, Mandrake, Slackware, etc.) describe ...

CAN-2004-0794

CVE-2004-0794 concerns lukemftpd/tnftpd before 2004-08-10. The remote server is vulnerable to multiple signal handler race conditions in lukemftpd, which can be exploited by remote authenticated attackers to cause a denial of service or to execute arbitrary code on the server. OpenVAS/Nessus entr...

CAN-2004-0772

CVE-2004-0772 is a set of double-free vulnerabilities in MIT Kerberos 5 (krb5), specifically in the error handling code for krb524d in MIT Kerberos 5 1.2.8 and earlier. These flaws may allow remote attackers to execute arbitrary code, primarily by exploiting double-free conditions in the KDC and ...

CAN-2004-0781

CVE-2004-0781 maps to an Icecast XSS in icecast-server (list.cgi) affecting 1.3.12 and earlier. The vulnerability arises from improper input sanitization in the status display, allowing remote attackers to craft a link containing script code that executes in a user’s browser, potentially stealing...

CAN-2004-0564

CVE-2004-0564 refers to the RP-PPPoE (rp-pppoe) component. When pppoe is run with setuid root, it can allow local users to overwrite arbitrary files, per multiple advisories (Debian DSA-557-1, Mandrake MDKSA-2004:145) and OSV/NVD entries. The issue arises only in configurations where rp-pppoe is ...

CAN-2004-0913

CVE-2004-0913 affects ecartis (0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8). An attacker in the same domain could gain administrator privileges and modify configuration. Public documents reference Debian advisory DSA-572-1 and OpenVAS/Nessus entries confirming the...

CAN-2004-0788

CVE-2004-0788 is confirmed in gdk-pixbuf/gtk+ stack. The ICO image loader decodes ICO headers with an integer overflow in DecodeHeader(), exposeable to remote attackers via crafted ICO files, potentially causing a denial of service (and, per some sources, possible arbitrary code execution in cont...

CAN-2004-0805

CVE-2004-0805 describes a buffer overflow in mpg123 (versions 0.59r and possibly 0.59s) in layer2.c that could allow a remote attacker to execute arbitrary code when processing crafted MP3/MP2 files. Documents from NVD, Debian DSA-564-1, and OpenVAS entries corroborate the vulnerability across mp...

CAN-2004-0851

The CVE refers to Net-Acct and concerns insecure temporary file creation that enables local users to overwrite arbitrary files via a symlink attack on temporary files. Root cause: insecure handling of temporary file creation in Net‑Acct before version 0.71. The issue is local in scope and affects...

CAN-2004-0557

SoX versions 12.17.2–12.17.4 are affected by multiple buffer overflows in wav.c (st_wavstartread) that allow remote code execution via crafted WAV header fields. Public reports credit Ulf Harnhammar; affected commands include sox (and play). Debian and Gentoo advisories document remote, arbitrary...

CAN-2004-0688

OpenMotif family components (e.g., openmotif, openmotif-libs, openmotif-devel, and the libXPM-related code) are associated with CVE-2004-0687 and CVE-2004-0688 due to stack/integer overflow in the libXPM image handling. The connected advisories (notably SUSE/SLES9 OpenMotif updates, Red Hat RHSA-...

CAN-2004-0916

CVE-2004-0916 describes a directory traversal vulnerability in cabextract prior to version 1.1. An attacker can construct a cabinet file containing file names with ".." sequences to overwrite arbitrary files on the target system. The connected documents confirm affected software and the basic imp...

CAN-2003-0193

CVE-2003-0193 affects catdoc/xlsview; msxlsview.sh in xlsview (catdoc 0.91 and earlier) allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names (word$$.html). Debian fixed in 0.91.5-1.woody3/0.91.5-2; other advisories (DSA-575-1) reference the same...

CAN-2004-0986

CVE-2004-0986 affects iptables before 1.2.11. Multiple sources (SUSE SUSE CVE, OSV, NVD) state that under certain conditions, iptables fails to load required modules at system startup, leaving firewall rules possibly unenforced and the system vulnerable to remote attackers. Remediation in sources...

CAN-2004-0964

CVE-2004-0964 concerns a stack-based buffer overflow in the Zinf Audio Player (formerly freeamp) version 2.2.1. The vulnerability arises from insufficient bounds checking when processing a specially crafted PLS playlist file. A remote attacker could exploit this by convincing a user to open a mal...

CAN-2004-1001

CVE-2004-1001 concerns the Shadow project: a vulnerability in the passwd_check function present in Shadow 4.0.4.1 and possibly earlier versions (before 4.0.5) that can allow local users to perform unauthorized actions when pam_chauthtok error handling is faulty. Public advisories (Debian DSA-585-...

CAN-2004-0972

CVE-2004-0972 pertains to the lvm package (notably the lvmcreate_initrd script) and is linked across multiple advisories (Trustix/Ubuntu/Debian/Gentoo). The vulnerability arises from insecure handling of temporary files, allowing a local attacker to overwrite files via a symlink attack in world-w...

CAN-2004-0970

CVE-2004-0970 concerns the gzip package: the (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package allow local users to overwrite files via a symlink attack on temporary files. This is a local privilege/overwrite issue, not remote code execution. The vulnerability is tied to the handling...