CAN-2005-0157

The CVE-2005-0157 issue affects SmartList, affected in version 3.15 and earlier. The vulnerability arises from incorrect input handling in the confirm add-on, allowing an attacker to subscribe arbitrary e-mail addresses by manipulating a valid cookie that designates a different address than the o...

CAN-2005-0870

CVE-2005-0870 is associated with phpsysinfo, a PHP-based host-information utility, as reflected in multiple advisories (e.g., Debian DSA-724/897/898 and OpenVAS entries). The connected documents describe several issues: cross-site scripting (XSS) vulnerabilities (CVE-2005-0870) and related proble...

CAN-2005-0739

Technical details for CVE-2005-0739 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-0605

Technical details about CVE-2005-0605 are not provided in the supplied documents; linked entries reference the CVE but do not describe affected products, root cause, or fixes. Monitor for updates.

CAN-2005-1523

CVE-2005-1523 is a format-string vulnerability in the GNU Mailutils imap4d server (also reflected in Debian Gentoo advisories) that may allow a remote attacker to execute arbitrary code with the IMAP service privileges. The connected advisories describe that the issue stems from insufficient sani...

CAN-2005-1345

CVE-2005-1345 is associated with multiple Squid vulnerabilities described across openvas entries and CentOS/Red Hat advisories. The issues involve: (1) improper handling of access control lists that could allow an authorised remote user to gain more access than intended, (2) a flaw related to how...

CAN-2005-0523

The CVE-2005-0523 entry pertains to ProZilla (versions up to 1.3.7.3 and earlier). A format string vulnerability in the Location header allows remote attackers to execute arbitrary code with the user’s privileges. Debian’s DSA-719-1 and related advisories fix the issue by upgrading ProZilla to la...

CAN-2005-0892

CVE-2005-0892 describes a buffer overflow in Smail, a mail transfer agent. The public records specify a vulnerability in Smail 3.2.0.120 where a long string in the MAIL FROM command (and possibly other SMTP commands) can allow remote attackers or local users to execute arbitrary code. Public list...

CAN-2005-0525

Technical details for CVE-2005-0525 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-0392

CVE-2005-0392 maps to the Debian ppxp local privilege escalation. ppxp does not release root privileges when opening potentially user‑supplied log files, enabling a root shell under certain conditions. Debian advisories DSA-725-1/725-2 document fixes: upgrade to ppxp 0.2001080415-10sarge2 (and ne...

CAN-2005-1349

CVE-2005-1349 is a vulnerability in Convert::UUlib, the Perl interface to uulib, where a buffer overflow could allow remote code execution. Public sources describe exploits against the Convert-UUlib library and indicate affected packages include libconvert-uulib-perl (Debian) with fixes in DSA-72...

CAN-2005-0953

CVE-2005-0953 concerns a race-condition in the bzip2 compressor/decompressor (v1.0.2 and earlier). During decompression in a directory the attacker could manipulate permissions of an unrelated file the user has access to, enabling local privilege modification. A related issue, CVE-2005-1260, desc...

CAN-2005-1121

CVE-2005-1121 is documented in Debian DSA-726-1 for the Oops caching HTTP proxy server. The vulnerability is a format string issue in the MySQL/PgSQL authentication module, exploitable remotely and potentially allowing arbitrary code execution. Debian notes the fix in the oops package (version 1....

CAN-2005-1546

CVE-2005-1546 is a buffer overflow vulnerability in ht’s PE parser, affecting ht packages in Debian (and cited in DSA-743-1). The issue was fixed in ht 0.8.0-2sarge4 (and related updates for woody before that). The Debian advisories describe the vulnerability and recommend upgrading ht to mitigat...

CAN-2005-1934

CVE-2005-1934 affects the Gaim multi-protocol instant messaging client, where a malformed MSN Messenger message can cause memory allocation errors and crash the application. Connected advisories describe this as part of two DoS issues in Gaim and reference fixed-updates (e.g., upgrade to version ...

CAN-2005-1228

CAN-2005-1228 concerns gzip/gunzip path traversal when decompressing with the -N option. Public advisories (e.g., Debian DSA-752-1, FreeBSD SA-05:11.gzip, CentOS advisories) describe that untrusted archives can cause gunzip to overwrite files in arbitrary directories by failing to sanitize the ta...

CAN-2005-0753

CVE-2005-0753 is a buffer overflow in CVS servers that process version/author data, potentially allowing remote code execution. Affected: CVS server (not clients) across multiple platforms; impact described as remote arbitrary code execution, depending on access method. Public details in Debian/F...

CAN-2005-1848

CVE-2005-1848 corresponds to a denial-of-service flaw in the dhcpcd DHCP client daemon caused by an out-of-bounds read from a crafted DHCP packet, leading to a crash. Affected products are various Linux distributions that package dhcpcd, with multiple advisories referencing the issue (Red Hat RHS...

CAN-2005-2040

CVE-2005-2040 pertains to the Heimdal Kerberos implementation. Public details in connected docs indicate a buffer overflow in the Heimdal telnet server that could allow remote code execution, with references in Debian advisory DSA-758-1 and FreeBSD/OpenVAS entries. The advisories caution that aff...

CAN-2005-1992

CVE-2005-1992 concerns Ruby’s XMLRPC server, where an insecure default in utils.rb (and related XMLRPC.iPIMethods handling) can allow a remote attacker to execute arbitrary commands if the server is used in a vulnerable configuration. Public advisories (e.g., RHSA-2005:543, USN-146-1) document th...