CAN-2005-0017

The provided OpenVAS/Gentoo/Debian/FreeBSD entries identify CVE-2005-0017 and, in some cases, CVE-2005-0018, as vulnerabilities in the f2c utility (Fortran-to-C translator). Technical details across the connected docs indicate the issue is related to insecure temporary file handling in f2c, which...

CAN-2005-0391

CVE-2005-0391 affects geneweb prior to certain fixes. The Debian advisories describe a local vulnerability during upgrade: the maintainer scripts converted files without verifying their permissions or content, which could allow modification of arbitrary files. Related entries (geneweb 4.10 and ea...

CAN-2004-1341

CVE-2004-1341 is a cross-site scripting (XSS) vulnerability in info2www, due to missing input sanitising. The issue affects info2www prior to version 1.2.2.9, with fixed versions in Debian as 1.2.2.9-20woody (woody) and 1.2.2.9-23 (sid). Debian DSAs (DSA-711-1) document remote exploitation via cr...

CAN-2003-0541

CVE-2003-0541 affects gtkhtml, used by Evolution. The vulnerability is a remote denial of service via a NULL pointer dereference triggered by malformed HTML in gtkhtml, allowing a crash of linked applications. Affected components are gtkhtml (prior to fixed releases), with Debian/DSA-710-1 noting...

CAN-2005-1046

CVE-2005-1046 corresponds to a buffer overflow in the KDE kimgio library used by kdelibs3/kdelibs (KDE 3.3.x). The issue arises when processing PCX images, enabling potential arbitrary code execution on vulnerable systems. Public feeds (Fedora 2005-350; Gentoo GLSA 200504-22; Debian DSA 714-1; SL...

CAN-2005-0472

GAIM (multi-protocol IM client) is affected by two remote issues: (1) a SNAC packet handling flaw that can trigger an infinite loop/deny‑of‑service, and (2) malformed HTML/SNAC input leading to client crashes or hangs. CVE-2005-0472 covers the SNAC‑based DoS; CVE-2005-0473 is associated with HTML...

CAN-2004-1154

CVE-2004-1154 pertains to Samba (versions 2.0.0 through 3.0.9). The OpenVAS entries describe an integer overflow that enables remote code execution. Public details in the connected Nessus/OpenVAS items confirm Samba vulnerability exposure and reference patches (e.g., Solaris patch sets) that miti...

CAN-2005-0393

CVE-2005-0393 relates to crip 3.5: the helper scripts do not properly use temporary files, which can allow local users to cause an unknown impact with unknown attack vectors. The connected sources (OSV, NVD, Debian tracker, Red Hat entry, Debian/OSS plugins) confirm the same description. No speci...

CAN-2005-0157

The CVE-2005-0157 issue affects SmartList, affected in version 3.15 and earlier. The vulnerability arises from incorrect input handling in the confirm add-on, allowing an attacker to subscribe arbitrary e-mail addresses by manipulating a valid cookie that designates a different address than the o...

CAN-2005-0870

CVE-2005-0870 is associated with phpsysinfo, a PHP-based host-information utility, as reflected in multiple advisories (e.g., Debian DSA-724/897/898 and OpenVAS entries). The connected documents describe several issues: cross-site scripting (XSS) vulnerabilities (CVE-2005-0870) and related proble...

CAN-2005-0605

Technical details about CVE-2005-0605 are not provided in the supplied documents; linked entries reference the CVE but do not describe affected products, root cause, or fixes. Monitor for updates.

CAN-2005-0739

Technical details for CVE-2005-0739 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-1523

CVE-2005-1523 is a format-string vulnerability in the GNU Mailutils imap4d server (also reflected in Debian Gentoo advisories) that may allow a remote attacker to execute arbitrary code with the IMAP service privileges. The connected advisories describe that the issue stems from insufficient sani...

CAN-2005-1345

CVE-2005-1345 is associated with multiple Squid vulnerabilities described across openvas entries and CentOS/Red Hat advisories. The issues involve: (1) improper handling of access control lists that could allow an authorised remote user to gain more access than intended, (2) a flaw related to how...

CAN-2005-0523

The CVE-2005-0523 entry pertains to ProZilla (versions up to 1.3.7.3 and earlier). A format string vulnerability in the Location header allows remote attackers to execute arbitrary code with the user’s privileges. Debian’s DSA-719-1 and related advisories fix the issue by upgrading ProZilla to la...

CAN-2005-0892

CVE-2005-0892 describes a buffer overflow in Smail, a mail transfer agent. The public records specify a vulnerability in Smail 3.2.0.120 where a long string in the MAIL FROM command (and possibly other SMTP commands) can allow remote attackers or local users to execute arbitrary code. Public list...

CAN-2005-0525

Technical details for CVE-2005-0525 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-0392

CVE-2005-0392 maps to the Debian ppxp local privilege escalation. ppxp does not release root privileges when opening potentially user‑supplied log files, enabling a root shell under certain conditions. Debian advisories DSA-725-1/725-2 document fixes: upgrade to ppxp 0.2001080415-10sarge2 (and ne...

CAN-2005-1349

CVE-2005-1349 is a vulnerability in Convert::UUlib, the Perl interface to uulib, where a buffer overflow could allow remote code execution. Public sources describe exploits against the Convert-UUlib library and indicate affected packages include libconvert-uulib-perl (Debian) with fixes in DSA-72...

CAN-2005-0953

CVE-2005-0953 concerns a race-condition in the bzip2 compressor/decompressor (v1.0.2 and earlier). During decompression in a directory the attacker could manipulate permissions of an unrelated file the user has access to, enabling local privilege modification. A related issue, CVE-2005-1260, desc...