CAN-2005-1121

CVE-2005-1121 is documented in Debian DSA-726-1 for the Oops caching HTTP proxy server. The vulnerability is a format string issue in the MySQL/PgSQL authentication module, exploitable remotely and potentially allowing arbitrary code execution. Debian notes the fix in the oops package (version 1....

CAN-2005-1546

CVE-2005-1546 is a buffer overflow vulnerability in ht’s PE parser, affecting ht packages in Debian (and cited in DSA-743-1). The issue was fixed in ht 0.8.0-2sarge4 (and related updates for woody before that). The Debian advisories describe the vulnerability and recommend upgrading ht to mitigat...

CAN-2005-1934

CVE-2005-1934 affects the Gaim multi-protocol instant messaging client, where a malformed MSN Messenger message can cause memory allocation errors and crash the application. Connected advisories describe this as part of two DoS issues in Gaim and reference fixed-updates (e.g., upgrade to version ...

CAN-2005-1228

CAN-2005-1228 concerns gzip/gunzip path traversal when decompressing with the -N option. Public advisories (e.g., Debian DSA-752-1, FreeBSD SA-05:11.gzip, CentOS advisories) describe that untrusted archives can cause gunzip to overwrite files in arbitrary directories by failing to sanitize the ta...

CAN-2005-0753

CVE-2005-0753 is a buffer overflow in CVS servers that process version/author data, potentially allowing remote code execution. Affected: CVS server (not clients) across multiple platforms; impact described as remote arbitrary code execution, depending on access method. Public details in Debian/F...

CAN-2005-1848

CVE-2005-1848 corresponds to a denial-of-service flaw in the dhcpcd DHCP client daemon caused by an out-of-bounds read from a crafted DHCP packet, leading to a crash. Affected products are various Linux distributions that package dhcpcd, with multiple advisories referencing the issue (Red Hat RHS...

CAN-2005-2040

CVE-2005-2040 pertains to the Heimdal Kerberos implementation. Public details in connected docs indicate a buffer overflow in the Heimdal telnet server that could allow remote code execution, with references in Debian advisory DSA-758-1 and FreeBSD/OpenVAS entries. The advisories caution that aff...

CAN-2005-1853

CVE-2005-1853 affects the Gopher client (gopher.c) in version 3.0.5, where improper creation of temporary files permits local users to gain privileges. Multiple sources (Red Hat advisory, CVE listing, Debian/Debian OSSVOS) confirm the flaw and its local-privilege elevation impact. Debian’s DSA-77...

CAN-2005-1519

CVE-2005-1519 concerns Squid Web Proxy Cache and arises from a flaw in DNS lookup processing that allows an attacker to spoof DNS responses and poison a target’s DNS cache. The issue stems from predictable DNS transaction identifiers used by Squid, enabling remote exploitation when the DNS client...

CAN-2005-1544

CVE-2005-1544 corresponds to a stack-based buffer overflow in libtiff that could allow remote code execution when processing malformed TIFF files. Public advisories (Debian DSA-755-1, Ubuntu USN-130-1, Mandrake MDKSA-2006:042, etc.) document this as a remote vulnerability affecting libtiff across...

CAN-2005-1686

CVE-2005-1686 is a format-string vulnerability in gedit (GNOME text editor) affecting multiple platforms. Connected advisories note a flaw in gedit’s filename handling that could permit arbitrary code execution. Public fixes exist across affected OS families, including Solaris patches (e.g., 1202...

CAN-2005-1916

CVE-2005-1916 is evidenced in multiple advisory feeds tied to ekg (Gadu client) vulnerabilities. The issue arises from insecure temporary file creation and an arbitrary command execution path in a contributed script, enabling a local attacker to exploit the vulnerability. Debian’s DSA-760-1 and U...

CAN-2005-2320

CVE-2005-2320 affects the WebCalendar PHP-based calendar. Multiple sources (RH CVE entry and Debian security advisories) describe an authorization failure where accessing the file assistant_edit.php can disclose sensitive information to unauthorized users. The OpenVAS entries reference related ad...

CAN-2005-2277

CVE-2005-2277 affects Nokia Affix BTFTP (Bluetooth FTP client) in AS platforms; root cause is missing input sanitisation before executing shell commands, allowing remote attackers to run arbitrary commands via shell metacharacters in the PUT filename. Affected: Affix BTFTP 2.1.2 and 3.2.0. Mitiga...

CAN-2005-0469

CVE-2005-0469 is a reported buffer overflow in the LINEMODE handling of telnet clients. Several BSD-based telnet clients exhibit a vulnerability in the slc_add_reply function that can be triggered by a reply containing a large number of SLC commands, potentially allowing remote code execution. Th...

CAN-2005-2302

PowerDNS (pdns) versions before 2.9.18 are affected by CAN-2005-2302. When recursion is allowed only for a restricted IP range, the server may mishandle queries from clients denied recursion, causing a temporary blanking of answers for clients that are permitted to recurse. This description is su...

CAN-2005-1854

CVE-2005-1854 corresponds to a Debian apt-cacher remote command execution vulnerability (missing input sanitising) affecting Debian 3.1. Exploitation could allow remote code execution as user www-data on the caching host. Debian fixed this in apt-cacher versions 0.9.4sarge1 and 0.9.10 for sid, wi...

CAN-2005-2724

CVE-2005-2724 is a real cross-site scripting (XSS) issue in SqWebmail, part of the Courier suite. The vulnerability arises from missing input sanitising in the handling of file attachments, enabling a remote attacker to inject script/HTML that may execute in a user’s browser when attachments are ...

CAN-2005-2370

CVE-2005-2370 is a memory-alignment related denial-of-service in the Gadu-Gadu component (libgadu/ekg) used by ekg/gaim. Affected architectures include SPARC; impact is remote DoS/crash. Debian/Ubuntu advisories document multiple releases affected (Sarge, Etch, Sid) and provide patches in ekg pac...

CAN-2005-2231

CVE-2005-2231 is linked to the heartbeat component in High-Availability Linux deployments. Debi an advisory DSA-761-1/761-2 describes insecure temporary file creation in heartbeat, with fixes provided for older Debian releases (e.g., 1.2.3-9sarge2 for sarge). OpenVAS entries (Debian DSA, Gentoo G...