CAN-2005-2040

CVE-2005-2040 pertains to the Heimdal Kerberos implementation. Public details in connected docs indicate a buffer overflow in the Heimdal telnet server that could allow remote code execution, with references in Debian advisory DSA-758-1 and FreeBSD/OpenVAS entries. The advisories caution that aff...

CAN-2005-1992

CVE-2005-1992 concerns Ruby’s XMLRPC server, where an insecure default in utils.rb (and related XMLRPC.iPIMethods handling) can allow a remote attacker to execute arbitrary commands if the server is used in a vulnerable configuration. Public advisories (e.g., RHSA-2005:543, USN-146-1) document th...

CAN-2005-1853

CVE-2005-1853 affects the Gopher client (gopher.c) in version 3.0.5, where improper creation of temporary files permits local users to gain privileges. Multiple sources (Red Hat advisory, CVE listing, Debian/Debian OSSVOS) confirm the flaw and its local-privilege elevation impact. Debian’s DSA-77...

CAN-2005-1914

CVE-2005-1914 affects CenterICQ 4.20.0 and earlier. The vulnerability arises because CenterICQ creates temporary files with predictable filenames, enabling local attackers to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file. The available connected documents confi...

CAN-2005-1519

CVE-2005-1519 concerns Squid Web Proxy Cache and arises from a flaw in DNS lookup processing that allows an attacker to spoof DNS responses and poison a target’s DNS cache. The issue stems from predictable DNS transaction identifiers used by Squid, enabling remote exploitation when the DNS client...

CAN-2005-1544

CVE-2005-1544 corresponds to a stack-based buffer overflow in libtiff that could allow remote code execution when processing malformed TIFF files. Public advisories (Debian DSA-755-1, Ubuntu USN-130-1, Mandrake MDKSA-2006:042, etc.) document this as a remote vulnerability affecting libtiff across...

CAN-2005-1686

CVE-2005-1686 is a format-string vulnerability in gedit (GNOME text editor) affecting multiple platforms. Connected advisories note a flaw in gedit’s filename handling that could permit arbitrary code execution. Public fixes exist across affected OS families, including Solaris patches (e.g., 1202...

CAN-2005-1916

CVE-2005-1916 is evidenced in multiple advisory feeds tied to ekg (Gadu client) vulnerabilities. The issue arises from insecure temporary file creation and an arbitrary command execution path in a contributed script, enabling a local attacker to exploit the vulnerability. Debian’s DSA-760-1 and U...

CAN-2005-2320

CVE-2005-2320 affects the WebCalendar PHP-based calendar. Multiple sources (RH CVE entry and Debian security advisories) describe an authorization failure where accessing the file assistant_edit.php can disclose sensitive information to unauthorized users. The OpenVAS entries reference related ad...

CAN-2005-2277

CVE-2005-2277 affects Nokia Affix BTFTP (Bluetooth FTP client) in AS platforms; root cause is missing input sanitisation before executing shell commands, allowing remote attackers to run arbitrary commands via shell metacharacters in the PUT filename. Affected: Affix BTFTP 2.1.2 and 3.2.0. Mitiga...

CAN-2005-0469

CVE-2005-0469 is a reported buffer overflow in the LINEMODE handling of telnet clients. Several BSD-based telnet clients exhibit a vulnerability in the slc_add_reply function that can be triggered by a reply containing a large number of SLC commands, potentially allowing remote code execution. Th...

CAN-2005-2302

PowerDNS (pdns) versions before 2.9.18 are affected by CAN-2005-2302. When recursion is allowed only for a restricted IP range, the server may mishandle queries from clients denied recursion, causing a temporary blanking of answers for clients that are permitted to recurse. This description is su...

CAN-2005-1854

CVE-2005-1854 corresponds to a Debian apt-cacher remote command execution vulnerability (missing input sanitising) affecting Debian 3.1. Exploitation could allow remote code execution as user www-data on the caching host. Debian fixed this in apt-cacher versions 0.9.4sarge1 and 0.9.10 for sid, wi...

CAN-2005-2724

CVE-2005-2724 is a real cross-site scripting (XSS) issue in SqWebmail, part of the Courier suite. The vulnerability arises from missing input sanitising in the handling of file attachments, enabling a remote attacker to inject script/HTML that may execute in a user’s browser when attachments are ...

CAN-2005-2370

CVE-2005-2370 is a memory-alignment related denial-of-service in the Gadu-Gadu component (libgadu/ekg) used by ekg/gaim. Affected architectures include SPARC; impact is remote DoS/crash. Debian/Ubuntu advisories document multiple releases affected (Sarge, Etch, Sid) and provide patches in ekg pac...

CAN-2005-2231

CVE-2005-2231 is linked to the heartbeat component in High-Availability Linux deployments. Debi an advisory DSA-761-1/761-2 describes insecure temporary file creation in heartbeat, with fixes provided for older Debian releases (e.g., 1.2.3-9sarge2 for sarge). OpenVAS entries (Debian DSA, Gentoo G...

CAN-2005-2335

CVE-2005-2335 describes a buffer overflow in fetchmail’s POP3 UIDL handling code. The vulnerability could allow a malicious POP3 server to crash fetchmail or execute arbitrary code with the user’s privileges. Connected advisories (Debian DSA/DSA-774-1, Ubuntu USN-153-1, CentOS/RHSA, Mandrake/MKDS...

CAN-2005-1937

CVE-2005-1937 appears across multiple advisories tied to Mozilla/Firefox components. Connected documents show CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and references in Ubuntu USN-149-1, Debian DSA-810-1, Gentoo GLSA 200507-24, FreeBSD ports Firefox advisories. Affected products include Firefox...

CAN-2005-2450

CVE-2005-2450 affects Clam AntiVirus (clamav). Technical details across sources show an integer overflow vulnerability in CHM, TNEF, and FSG format handling that can lead to heap corruption, potentially allowing denial of service or remote code execution when processing specially crafted files (e...

CAN-2005-2761

CVE-2005-2761 is associated with phpGroupWare and is documented in Debian DSA-798-1 and related OpenVAS entries. The vulnerability refers to a global cross-site scripting fix designed to protect against malicious scripts embedded in CSS and xmlns across various phpGroupWare components. Remediatio...