CAN-2005-2663

CVE-2005-2663 affects masqmail, where opening the log file does not relinquish privileges, enabling a local attacker to overwrite arbitrary files via a symlink attack. Root cause: masqmail’s log handling privileges are not dropped, allowing local writes through symlink if/Masqmail opens or writes...

CAN-2005-2992

Arc on Unix up to version 5.21j and earlier creates a temporary file with insecure permissions, allowing a local user to overwrite arbitrary files via a symlink attack (CVE-2005-2992; also CVE-2005-2945). Debian and SuSE advisories reference these vulnerabilities and patches exist (DSA-843-1; arc...

CAN-2005-2971

CVE-2005-2971 affects the RTF importer in KWord/KOffice (KDE Office). The connected OpenVAS/Nessus entries confirm a buffer overflow that can lead to arbitrary code execution. Advisories across distributions document the issue and release patches or updates (e.g., Debian DSA-872-1; Gentoo GLSA 20...

CAN-2005-2963

CVE-2005-2963 affects the mod_auth_shadow Apache module (versions 1.0–2.0) where AuthShadow-enabled configurations cause shadow authentication to apply to all locations using the require group directive, potentially bypassing other access controls. Public disclosures in Debian (DSA-844-1), SUSE/O...

CAN-2005-2367

This CVE (CAN-2005-2367) is part of a set of issues in Ethereal (network traffic analyser). Connected advisories confirm format-string vulnerabilities in several dissectors could allow remote code execution; other CVEs (2360–2366) primarily describe denial-of-service conditions. Remediation acros...

CAN-2005-1267

CVE-2005-1267 affects tcpdump (BGP dissector). The vulnerability arises when tcpdump’s bgp_update_print decodes a BGP packet and mishandles a -1 return value from decode_prefix4, allowing remote attackers to trigger an infinite loop and cause a denial of service. This issue has been addressed in ...

CAN-2005-2965

CVE-2005-4803 affects graphviz before 2.2.1, allowing a local user to overwrite arbitrary files through a symlink attack on temporary files. This issue was originally associated with CVE-2005-2965, but multiple sources (SUSE advisory) clarify that CVE-2005-4803 is the correct identifier. Connecte...

CAN-2005-3178

CVE-2005-3178 describes a buffer overflow in XLI/Xloadimage caused by a fixed-length buffer used to store NIFF/XPM image titles during image processing. An attacker could craft a malicious NIFF/XPM image to overflow this buffer, potentially enabling arbitrary code execution with the user’s privil...

CAN-2005-2967

CVE-2005-2967 is a format-string vulnerability in the CDDB processing component of the xine-lib library. Across multiple distributions (Debian, Ubuntu, Gentoo, Mandrake/Mandriva, FreeBSD ports, etc.), advisories describe that an attacker can cause arbitrary code execution by pointing a vulnerable...

CAN-2005-2337

CVE-2005-2337 is a Ruby vulnerability involving bypass of the language’s safe level checks, potentially allowing an attacker to execute arbitrary code. The JVNDB entry describes bypassing safe level to run arbitrary scripts, implying code execution beyond safety restrictions. Ubuntu advisories US...

CAN-2005-3068

The CVE CAN-2005-3068 maps to an issue in Eric (eric3) with missing input sanitising that could allow arbitrary code execution. Publicly referenced material in connected documents identifies Debian advisory DSA-869-1 fix for eric, affecting older 3.6.2-2 (Sarge) and 3.7.2-1 (Sid). The OpenVAS/NVD...

CAN-2004-0817

CVE-2004-0817 is evidenced across connected advisories for imlib and imlib2 in FreeBSD Ports and SLES9, with CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). OpenVAS entries reference FreeBSD/ Gentoo advisories (imagemagick/imlib) and note missing updates per those advisories, indicating vulnerable in...

CAN-2005-3121

CVE-2005-3121 affects the module-assistant tool; a rule file before 0.9.10 creates a temporary file insecurely, allowing local users to perform unauthorized operations. Debian notes fixed in 0.9.10 (DSA-867-1) and provides upgrade guidance. Open questions remain about real-world exploitation deta...

CVE-2004-0912

Technical details are not publicly available in the provided documents for CVE-2004-0912. Monitor for updates from Ubuntu security advisories and this CVE entry as more information becomes available.

CVE-2013-3109

The connected OSV entry for UBUNTU-CVE-2013-3109 lists a vulnerability described as “SSL vaildation failed to validate hostnames.” The UB:CVE-2013-3109 Ubuntu entry also shows this description. No concrete affected product/version details, root-cause analysis, impact assessment, exploit status, o...

CVE-2015-4663

Technical details are not publicly available in the provided documents. Monitor for updates from Ubuntu or OSV entries for CVE-2015-4663.

CVE-2018-9782

Technical details for CVE-2018-9782 are not provided in the supplied documents. No exposed information on affected products, impact, or remediation. Monitor for updates as additional details may be published.

CVE-2019-14775

Technical details for CVE-2019-14775 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-2685

The connected records confirm a SQL injection vulnerability in the Icinga Web API (CVE-2015-2685). Affected software: Icinga Web API. Root cause: SQL injection in the Web API. Impact is not detailed in the provided documents beyond identifying an SQL injection issue. Exploitation details are not ...

CVE-2021-0448

Technical details for CVE-2021-0448 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the linked sources (Ubuntu, Nessus, OSV, UB) to obtain concrete information.