CAN-2005-0108

CVE-2005-0108 affects Apache mod_auth_radius 1.5.4 and the libpam-radius-auth module. The issue is a remote denial-of-service caused by a malformed RADIUS_REPLY_MESSAGE with a length of 1, triggering a memcpy with a -1 length argument. Public records outside the initial doc identify this as an in...

CAN-2005-0077

CVE-2005-0077 affects perl-DBI. Connected advisories (SUSE, Gentoo, FreeBSD, Debian, Ubuntu) indicate the issue is tied to insecure temporary-file handling in the module. Remediation in affected distros includes applying patches or updates (e.g., SUSE YOU patch 9838; Debian DSA 658-1; Ubuntu USN-...

CAN-2005-0004

CVE-2005-0004 affects MySQL: the mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other legacy 3.x series enables a local user to read/overwrite arbitrary files via a symlink attack on temporary files. Root cause is insecure handling of temporary files ...

CAN-2005-0078

CVE-2005-0078 refers to a KDE screensaver issue disclosed in early KDE/kdelibs/kdebase advisories. The KDE screensaver (kscreensaver) in KDE up to version 3.0.5 fails to properly check the return value from a critical function, enabling a local attacker with physical access to crash the screensav...

CAN-2005-0095

CVE-2005-0095 affects Squid: a vulnerability in the Web Cache Communication Protocol (WCCP) message parsing can trigger a memory access exception, potentially causing a denial-of-service. Exploitation is described as using a specially crafted WCCP I_SEE_YOU message to crash the Squid process. Rem...

CAN-2005-0079

CVE-2005-0079 targets the xtrlock utility. The OpenVAS/NVD/OSV reports describe a buffer overflow in xtrlock 2.0 that allows local users to cause a denial of service (crash) and hijack the desktop session. Exploitation details are not provided in the supplied documents. Debian advisory DSA-649-1 ...

CAN-2005-0018

CVE-2005-0018 corresponds to the f2c package (version 3.1) where the f2 shell script allows local users to read arbitrary files via a symlink attack on temporary files. Multiple connected sources (SU​SE CVE entry, Debian/DSA alerts, NVD/OSV entries) confirm this vulnerability affecting the f2c/ f...

CAN-2005-0071

The CVE-2005-0071 entry applies to Video Disk Recorder (VDR) prior to version 1.2.6. The vulnerability is that VDR did not securely create files, allowing a local attacker to overwrite arbitrary files via insecure file handling. Public records (OSV OSV-) summarize: vdr before 1.2.6 does not secur...

CAN-2005-0076

CVE-2005-0076 corresponds to multiple buffer overflows in the XView library 3.2. These flaws may allow local users to execute arbitrary code via setuid applications that link against XView. Documented in NVD, Debian/SUSE OpenVAS entries, and CVE listings. No exact vulnerable versions beyond XView...

CAN-2004-1379

The CVE CAN-2004-1379 describes a heap overflow in the DVD subpicture decoder of xine-lib (CVE-2004-1379). Public reports in Debian and OpenVAS indicate this could allow remote code execution by handling a malicious MPEG, with Debian noting the issue affects xine-lib and providing fixed packages ...

CAN-2005-0089

CVE-2005-0089 is reflected in multiple OpenVAS entries tied to Python updates across Linux distributions (Debian DSA-666-1, Gentoo GLSA 200502-09, SLES9 security updates, FreeBSD ports, Ubuntu USN-73-1). Descriptions indicate the remote host requires updates to Python packages; CVSS base score is...

CAN-2005-0202

CVE-2005-0202 describes a directory traversal in Mailman 2.1.5 and earlier, exploiting the true_path function in private.py to read arbitrary files via crafted path patterns like ../ and .../..//. Affects Mailman 2.1.5 and earlier; remote attackers could access sensitive files if the application ...

CAN-2004-1180

CVE-2004-1180 affects the rwhod daemon in netkit-rwho on little-endian architectures, with a remote denial-of-service possible due to missing input validation in versions before 0.17. The Debian DSA mentions fixed releases (0.17-4woody2 for woody and 0.17-8 for sid); other OpenVAS/NASL entries co...

CAN-2005-0019

CVE-2005-0019 affects hztty, a converter for GB/Big5 and zW/HZ encodings used in a tty session. Debian’s DSA-675-1 notes a local privilege-escalation flaw that can allow non-privileged users to execute arbitrary commands with utmp group privileges on hztty prior to the patched versions. The advis...

CAN-2005-0105

CVE-2005-0105 affects the typespeed package. The Debian advisories (DSA-684-1) describe a local format-string vulnerability in typespeed

CAN-2005-0073

CVE-2005-0073: A buffer overflow in queue.c in sympa 3.3.3 (when running setuid) can allow a local user to execute arbitrary code. Public references describe this as a local privilege escalation vulnerability in Sympa; affected releases include sympa prior to 4.1.3. Mitigation in the cited OpenVA...

CAN-2005-0639

The CVE entry CVE-2005-0639 concerns the xli image viewer. Connected sources confirm multiple related issues (CVE-2005-0638 and CVE-2005-0639) in xli’s handling of images: inappropriate escaping of shell meta-characters and insufficient validation of image properties, which can cause heap/buffer ...

CAN-2005-0372

CVE-2005-0372 is a directory traversal vulnerability in gFTP (GTK+ client). A remote attacker sending crafted directory listings via LIST could cause overwriting of arbitrary files on the victim’s system. The issue affects gFTP prior to the fixed package; multiple advisories (RHSA-2005:410, CESA-...

CAN-2005-0158

CVE-2005-0158 applies to BidWatcher, a tool for bidding on eBay auctions. The vulnerability is a format-string flaw in netstuff.cpp that can be triggered by remote inputs via an eBay HTTP server (or a spoofed server/ MITM), potentially allowing denial of service and arbitrary code execution. Publ...

CAN-2005-0385

CVE-2005-0385 refers to a buffer overflow in luxman, an SVGA-based PacMan clone. The issue is a local root vulnerability triggered by an overly long -f argument, potentially allowing arbitrary code execution as root on affected systems. Debian’s DSA-693-1 describes the fix: version 0.41-17.2 (and...