CAN-2004-0913

CVE-2004-0913 affects ecartis (0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8). An attacker in the same domain could gain administrator privileges and modify configuration. Public documents reference Debian advisory DSA-572-1 and OpenVAS/Nessus entries confirming the...

CAN-2004-0788

CVE-2004-0788 is confirmed in gdk-pixbuf/gtk+ stack. The ICO image loader decodes ICO headers with an integer overflow in DecodeHeader(), exposeable to remote attackers via crafted ICO files, potentially causing a denial of service (and, per some sources, possible arbitrary code execution in cont...

CAN-2004-0815

CVE-2004-0815 corresponds to a remote arbitrary file-access vulnerability in Samba. Public details in connected documents indicate that Samba versions prior to 2.2.11 and 3.x prior to 3.0.7 were vulnerable to accessing files outside the share’s defined path. Some sources note that later research ...

CAN-2004-0563

The CVE CAN-2004-0563 (CVE-2004-0563) relates to freenet6 where the tspc.conf file is world-readable, exposing potential sensitive data (e.g., username and password) to local users. Connected advisories confirm Debian’s DSA-555-1 and related Debian security notices describe a local information-le...

CAN-2004-0881

CVE-2004-0881 affects getmail: getmail 4.x before 4.2.0 and other versions before 3.2.5. When run as root, it allows local users to overwrite arbitrary files via a symlink attack on subdirectories of the maildir. Impact is local file writes. Remediation: upgrade to getmail 4.2.0 or newer (or 3.2....

CAN-2004-0805

CVE-2004-0805 describes a buffer overflow in mpg123 (versions 0.59r and possibly 0.59s) in layer2.c that could allow a remote attacker to execute arbitrary code when processing crafted MP3/MP2 files. Documents from NVD, Debian DSA-564-1, and OpenVAS entries corroborate the vulnerability across mp...

CAN-2004-0851

The CVE refers to Net-Acct and concerns insecure temporary file creation that enables local users to overwrite arbitrary files via a symlink attack on temporary files. Root cause: insecure handling of temporary file creation in Net‑Acct before version 0.71. The issue is local in scope and affects...

CAN-2004-0557

SoX versions 12.17.2–12.17.4 are affected by multiple buffer overflows in wav.c (st_wavstartread) that allow remote code execution via crafted WAV header fields. Public reports credit Ulf Harnhammar; affected commands include sox (and play). Debian and Gentoo advisories document remote, arbitrary...

CAN-2004-0688

OpenMotif family components (e.g., openmotif, openmotif-libs, openmotif-devel, and the libXPM-related code) are associated with CVE-2004-0687 and CVE-2004-0688 due to stack/integer overflow in the libXPM image handling. The connected advisories (notably SUSE/SLES9 OpenMotif updates, Red Hat RHSA-...

CAN-2004-0884

CVE-2004-0884 corresponds to a Cyrus-SASL related issue. Multiple OpenVAS and vendor advisories indicate that remote systems using Cyrus SASL libraries may be affected unless updates are applied. A notable FreeBSD entry highlights a potential privilege escalation vector: libraries loaded via SASL...

CAN-2004-0886

CVE-2004-0886 concerns integer overflow bugs in libtiff used by the kdegraphics/kfax code path. The issue could allow memory corruption or arbitrary code execution when a user opens a crafted TIFF file, due to overflows in libtiff’s processing. The affected product is kdegraphics (and its kfax co...

CAN-2004-0911

CVE-2004-0911 is referenced across multiple scanners in connection with the netkit telnet package (netkit-telnet and netkit-telnet-ssl). The connected Nessus/OpenVAS entries identify Debian/Ubuntu/OpenVAS advisories (e.g., DSA-569-1, DSA-556-1/DSA-556-2, and SUSE CVE page) indicating that remote ...

CAN-2004-0916

CVE-2004-0916 describes a directory traversal vulnerability in cabextract prior to version 1.1. An attacker can construct a cabinet file containing file names with ".." sequences to overwrite arbitrary files on the target system. The connected documents confirm affected software and the basic imp...

CAN-2004-0982

CVE-2004-0982 is linked to mpg123 and is described in multiple feeds as a heap-based buffer overflow in httpdget.c that allows remote code execution via a long URL, affecting mpg123 before the 0.59s-rll patch. The issue is cited in later entries (e.g., CVE-2006-3355 as an incomplete patch continu...

CAN-2004-0980

CVE-2004-0980 is a format-string vulnerability in ez-ipupdate. The connected documents identify ez-ipupdate as affected, specifically versions 3.0.10 through 3.0.11b8, with exploitation possible when running in daemon mode with certain service types in use, allowing remote execution of arbitrary ...

CAN-2003-0193

CVE-2003-0193 affects catdoc/xlsview; msxlsview.sh in xlsview (catdoc 0.91 and earlier) allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names (word$$.html). Debian fixed in 0.91.5-1.woody3/0.91.5-2; other advisories (DSA-575-1) reference the same...

CAN-2004-0986

CVE-2004-0986 affects iptables before 1.2.11. Multiple sources (SUSE SUSE CVE, OSV, NVD) state that under certain conditions, iptables fails to load required modules at system startup, leaving firewall rules possibly unenforced and the system vulnerable to remote attackers. Remediation in sources...

CAN-2004-0964

CVE-2004-0964 concerns a stack-based buffer overflow in the Zinf Audio Player (formerly freeamp) version 2.2.1. The vulnerability arises from insufficient bounds checking when processing a specially crafted PLS playlist file. A remote attacker could exploit this by convincing a user to open a mal...

CAN-2004-1001

CVE-2004-1001 concerns the Shadow project: a vulnerability in the passwd_check function present in Shadow 4.0.4.1 and possibly earlier versions (before 4.0.5) that can allow local users to perform unauthorized actions when pam_chauthtok error handling is faulty. Public advisories (Debian DSA-585-...

CAN-2004-0972

CVE-2004-0972 pertains to the lvm package (notably the lvmcreate_initrd script) and is linked across multiple advisories (Trustix/Ubuntu/Debian/Gentoo). The vulnerability arises from insecure handling of temporary files, allowing a local attacker to overwrite files via a symlink attack in world-w...