CAN-2004-0396

CVE-2004-0396 is a heap-based buffer overflow in CVS when parsing Entry lines for the pserver mechanism, enabling remote code execution. Affected CVS releases include CVS feature 1.12.x up to 1.12.7 and stable 1.11.x up to 1.11.15; exploitation occurs via malformed Entry lines that overflow mallo...

CAN-2004-0178

Technical details for CVE-2004-0178 are not publicly provided in the supplied documents; no affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from connected advisories.

CAN-2004-0409

CVE-2004-0409 affects XChat/XChat2 across multiple platforms (Red Hat, Debian, FreeBSD). The vulnerability is a stack-based buffer overflow in the SOCKSv5/Socks-5 proxy handling that could allow remote code execution. Advisories (RHSA-2004:585, DSA-493, Debian DSA-493) describe a patched updated ...

CAN-2003-0068

CVE-2003-0068 affects the Eterm terminal emulator (0.9.1 and earlier). An attacker can modify the window title using a specific escape sequence and then insert it back into the user’s command line, potentially allowing arbitrary commands to be executed. Remediation is to upgrade to eterm 0.9.2 (a...

CAN-2004-0398

CVE-2004-0398 affects the neon library (libneon) and is referenced in multiple advisories (GLSA-200405-13/15, Debian DSA-506/507, Mandrake MDKSA-2004:049/078). The issue is a heap-based buffer overflow in neon’s date parsing routines (notably ne_rfc1036_parse and ne_httpdate_parse) that could, de...

CAN-2004-0472

CVE CAN-2004-0472 maps to a Debian security advisory (DSA-504-1) describing a remote buffer overflow in the Kerberos 4 kadmind component of heimdal. The issue arises from missing input sanitising and could allow reading a negative amount of data, potentially triggering unexpected daemon behavior....

CAN-2004-0458

CVE-2004-0458 affects mah-jong (server component) prior to version 1.6.2. A missing argument can trigger a NULL pointer dereference, allowing remote attackers to cause a denial of service (server crash). Public advisories reference Debian (DSA-503), Ubuntu, and CVE records; the mitigation is to u...

CAN-2004-0414

CAN-2004-0414 concerns several CVS vulnerabilities including insufficient input validation on Entry lines (and related issues 0416/0417/0418). Across connected docs, CVS servers (cvs server or pserver) are affected with potential information disclosure, denial of service, or possibly arbitrary co...

CAN-2004-0827

CVE-2004-0827 is associated with ImageMagick across multiple advisories (Debian DSA 547-1, Ubuntu USN-35-1, Red Hat RHSA-2004:636). The connected documents describe a memory corruption issue in image processing (buffer/heap overflow in decoding BMP/DIB/related formats) that could allow arbitrary ...

CAN-2004-0411

CVE-2004-0411 is referenced across multiple advisories (Gentoo GLSA 200405-11, Debian DSA 518-1, Slackware SSA:2004-238-01, Gentoo GLSA 200405-11, FreeBSD/OPenVAS entries) as affecting kdelibs. OpenVAS entries assign a CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and describe the host as missing up...

CAN-2004-0077

CVE-2004-0077 is referenced in multiple Linux kernel security advisories (e.g., Debian DSA 442-1 and GLSA 200403-02) attached to OpenVAS entries, indicating a kernel vulnerability in the 2.4.x lineage across architectures (e.g., s390, mips, ia64). The OpenVAS data shows CVSS base score 7.2 with v...

CAN-2004-0418

CVE-2004-0418 is a vulnerability in the CVS server (CVS) where serve_notify() may perform an out-of-bounds write (single-byte) when handling data lines, potentially enabling arbitrary code execution. The linked advisories/document set (FreeBSD, Debian, Gentoo, Mandrake, Slackware, etc.) describe ...

CAN-2004-0794

CVE-2004-0794 concerns lukemftpd/tnftpd before 2004-08-10. The remote server is vulnerable to multiple signal handler race conditions in lukemftpd, which can be exploited by remote authenticated attackers to cause a denial of service or to execute arbitrary code on the server. OpenVAS/Nessus entr...

CAN-2004-0558

CVE-2004-0558 is referenced across multiple advisories (Slackware SSA:2004-266-01, Gentoo GLSA 200409-25, SLES9 updates, FreeBSD/FreeBSD Ports) as a CUPS-related issue. OpenVAS entries label it as a CUPS DoS with CVSS 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P). The connected docs discuss affected packages ...

CAN-2004-0755

CVE-2004-0755 relates to Ruby CGI::Session's FileStore creating session files with insecure permissions, potentially allowing session information leakage. The JVN entry describes the issue, noting improper file permissions in CGI::Session FileStore. Fedo ra advisories mention a security fix and p...

CAN-2004-0772

CVE-2004-0772 is a set of double-free vulnerabilities in MIT Kerberos 5 (krb5), specifically in the error handling code for krb524d in MIT Kerberos 5 1.2.8 and earlier. These flaws may allow remote attackers to execute arbitrary code, primarily by exploiting double-free conditions in the KDC and ...

CAN-2004-0781

CVE-2004-0781 maps to an Icecast XSS in icecast-server (list.cgi) affecting 1.3.12 and earlier. The vulnerability arises from improper input sanitization in the status display, allowing remote attackers to craft a link containing script code that executes in a user’s browser, potentially stealing...

CAN-2004-0564

CVE-2004-0564 refers to the RP-PPPoE (rp-pppoe) component. When pppoe is run with setuid root, it can allow local users to overwrite arbitrary files, per multiple advisories (Debian DSA-557-1, Mandrake MDKSA-2004:145) and OSV/NVD entries. The issue arises only in configurations where rp-pppoe is ...

CAN-2004-0559

Usermin maketemp.pl in versions 1.070 and 1.080 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/.usermin directory during installation. Root cause: insecure temporary directory handling in maketemp.pl; attacker can pre-create the directory and place a symlink to a...

CAN-2004-0809

CVE-2004-0809 corresponds to a WebDAV/ mod_dav issue in the Apache WebDAV module that could allow a remote attacker to crash the server (Denial of Service) on installations with WebDAV enabled. The connected OpenVAS/Nessus entries reference SuSE SLES9 advisories (patches 5009547 and 5013988) addr...