CAN-2005-0088

CVE-2005-0088 relates to an information leak in mod_python (publisher handle) that could allow remote access to published objects without permission. Multiple OpenVAS entries, Gentoo GLSA 200502-14, and SuSE/FreeBSD advisories describe affected packages such as apache2-mod_python and mod_python a...

CAN-2005-2240

CVE-2005-2240 affects xpvm (Graphical console for PVM); xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file. Debian and OSV/OpenVAS entries confirm the vulnerability; fixes exist in xpvm 1.2.5-7.3sarge1 (and 1.2.5-7.2w...

CAN-2005-0763

CVE-2005-0763 affects Midnight Commander (mc). The issue is a buffer overflow in mc up to version 4.5.55 and earlier, triggered by certain directory completion scenarios (and related handling in mc’s components), potentially allowing arbitrary code execution. Public sources (Debian DSA-698-1, OSV...

CAN-2005-0386

CAN-2005-0386 corresponds to a cross-site scripting (XSS) vulnerability in mailreader, reported as a remote issue that affects displaying messages with MIME types text/enriched or text/richtext. Public sources in the connected set identify mailreader before version 2.3.29 as vulnerable, with succ...

CAN-2004-0957

CVE-2004-0957 is cited across multiple connected advisories (Ubuntu USN-32/109, SLES9 MySQL updates, FreeBSD ports) as part of historical MySQL vulnerabilities. Documented info shows it co-occurs with advisories requesting updates or patches to MySQL components; CVSS scores in these entries range...

CAN-2005-0664

CVE-2005-0664 is linked in multiple Solaris patch advisories (GNOME EXIF library) affecting Solaris 10 x86/sparc platforms with patches 121096-04/05 and 121095-04/05. The underlying issue relates to GNOME EXIF tag parsing library used by GNOME 2.6.0 for digital cameras. Affected components includ...

CAN-2005-1109

CVE-2005-1109 refers to JunkBuster, a HTTP proxy. The vulnerability (affecting JunkBuster before version 2.0.2-r3) arises from heap corruption due to inconsistent use of an internal function, enabling remote attackers to crash the daemon and potentially execute arbitrary code. Impact is a remote ...

CAN-2005-0017

The provided OpenVAS/Gentoo/Debian/FreeBSD entries identify CVE-2005-0017 and, in some cases, CVE-2005-0018, as vulnerabilities in the f2c utility (Fortran-to-C translator). Technical details across the connected docs indicate the issue is related to insecure temporary file handling in f2c, which...

CAN-2005-0391

CVE-2005-0391 affects geneweb prior to certain fixes. The Debian advisories describe a local vulnerability during upgrade: the maintainer scripts converted files without verifying their permissions or content, which could allow modification of arbitrary files. Related entries (geneweb 4.10 and ea...

CAN-2004-1341

CVE-2004-1341 is a cross-site scripting (XSS) vulnerability in info2www, due to missing input sanitising. The issue affects info2www prior to version 1.2.2.9, with fixed versions in Debian as 1.2.2.9-20woody (woody) and 1.2.2.9-23 (sid). Debian DSAs (DSA-711-1) document remote exploitation via cr...

CAN-2003-0541

CVE-2003-0541 affects gtkhtml, used by Evolution. The vulnerability is a remote denial of service via a NULL pointer dereference triggered by malformed HTML in gtkhtml, allowing a crash of linked applications. Affected components are gtkhtml (prior to fixed releases), with Debian/DSA-710-1 noting...

CAN-2005-1046

CVE-2005-1046 corresponds to a buffer overflow in the KDE kimgio library used by kdelibs3/kdelibs (KDE 3.3.x). The issue arises when processing PCX images, enabling potential arbitrary code execution on vulnerable systems. Public feeds (Fedora 2005-350; Gentoo GLSA 200504-22; Debian DSA 714-1; SL...

CAN-2005-0157

The CVE-2005-0157 issue affects SmartList, affected in version 3.15 and earlier. The vulnerability arises from incorrect input handling in the confirm add-on, allowing an attacker to subscribe arbitrary e-mail addresses by manipulating a valid cookie that designates a different address than the o...

CAN-2005-0870

CVE-2005-0870 is associated with phpsysinfo, a PHP-based host-information utility, as reflected in multiple advisories (e.g., Debian DSA-724/897/898 and OpenVAS entries). The connected documents describe several issues: cross-site scripting (XSS) vulnerabilities (CVE-2005-0870) and related proble...

CAN-2005-0605

Technical details about CVE-2005-0605 are not provided in the supplied documents; linked entries reference the CVE but do not describe affected products, root cause, or fixes. Monitor for updates.

CAN-2005-0739

Technical details for CVE-2005-0739 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-0523

The CVE-2005-0523 entry pertains to ProZilla (versions up to 1.3.7.3 and earlier). A format string vulnerability in the Location header allows remote attackers to execute arbitrary code with the user’s privileges. Debian’s DSA-719-1 and related advisories fix the issue by upgrading ProZilla to la...

CAN-2005-0892

CVE-2005-0892 describes a buffer overflow in Smail, a mail transfer agent. The public records specify a vulnerability in Smail 3.2.0.120 where a long string in the MAIL FROM command (and possibly other SMTP commands) can allow remote attackers or local users to execute arbitrary code. Public list...

CAN-2005-0392

CVE-2005-0392 maps to the Debian ppxp local privilege escalation. ppxp does not release root privileges when opening potentially user‑supplied log files, enabling a root shell under certain conditions. Debian advisories DSA-725-1/725-2 document fixes: upgrade to ppxp 0.2001080415-10sarge2 (and ne...

CAN-2005-0953

CVE-2005-0953 concerns a race-condition in the bzip2 compressor/decompressor (v1.0.2 and earlier). During decompression in a directory the attacker could manipulate permissions of an unrelated file the user has access to, enabling local privilege modification. A related issue, CVE-2005-1260, desc...