CAN-2004-1010

CVE-2004-1010 is tied to a zip package flaw that multiple advisories reference (Ubuntu USN-18-1, Debian DSA-624-1, Gentoo GLSA, FreeBSD ports, etc.). The concrete issue is a buffer overflow triggered when creating ZIP archives with very long path names, which can allow code execution with the pri...

CAN-2004-1106

CVE-2004-1106 affects the gallery web application (PHP4-based photo album). The connected OpenVAS entries and Debian advisory describe a cross-site scripting vulnerability exploitable via specially formed URLs, enabling injection of arbitrary code. Debian’s DSA-642-1 and the linked Gentoo/FreeBSD...

CAN-2004-0555

The CVE CAN-2004-0555 entry corresponds to a buffer overflow in the Debian queue project (queue/queued.c and related files) prior to version 1.30.1, enabling remote code execution. Public sources in the connected documents identify the affected product as the queue load-balancing system, with the...

CAN-2004-1189

CVE-2004-1189 is a legitimate Kerberos (krb5) vulnerability affecting multiple platforms (Ubuntu, Debian, Gentoo, FreeBSD, etc.). The issue is described as a buffer overflow in the add_to_history() function of the MIT Kerberos 5 implementation, which could allow an authenticated attacker to execu...

CAN-2004-1282

LinPopUp (Linpopup) is affected by CVE-2004-1282. The vulnerability resides in the buffer handling for the strexpand function in string.c of LinPopUp 1.2.0, which allows a remote attacker to execute arbitrary code by sending a crafted message during a Reply operation. Public advisories (Debian DS...

CAN-2004-1182

HylaFAX contains a vulnerability in hfaxd (CVE-2004-1182) where, if a weak hosts.hfaxd file is used, a remote attacker can authenticate by supplying a crafted username or hostname that matches a regex against the hosts.hfaxd entry without a password. Affected: HylaFAX with weak hosts.hfaxd config...

CAN-2004-1091

CVE-2004-1091 affects Midnight Commander (mc) prior to 4.5.55, allowing remote attackers to cause a denial of service by triggering a null dereference. This is documented in multiple sources (NVD/CVE records) and is part of a set of issues tied to mc as described in OpenVAS and IDS advisories. Th...

CAN-2005-0020

CVE-2005-0020 describes a buffer overflow in playmidi prior to 2.4 that could allow a local user to execute arbitrary code. This vulnerability is documented across multiple sources (NVD, OSV, Debian/DSA entries, CVE listing, and vendor advisories) with the impact restricted to local privilege esc...

CAN-2005-0084

Technical details for CVE-2005-0084 are not provided in the supplied documents. No concrete product/vulnerability information is present. Monitor for updates from the referenced advisories and connected sources for affected products, impact, and fixes.

CAN-2005-0015

CVE-2005-0015 concerns Sword (diatheke CGI) 1.5.7a, where missing input sanitising in the diatheke CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Affected software is Sword under the Debian DSA-650-1 advisory; multiple sources (NVD, OSV, CVE li...

CAN-2004-1027

CVE-2004-1027 is a directory traversal vulnerability in unarj. The issue arises when extracting ARJ archives with the -x option; specially crafted archives can cause files to be created in the parent directory (…/.. paths) and, when used recursively, may overwrite critical system files. Publicly ...

CAN-2005-0005

CVE-2005-0005 is not a standalone hidden entry: connected advisories tie this CVE to ImageMagick-related issues across multiple distributions (Debian DSA-646-1, Gentoo GLSA 200501-26/37, FreeBSD ports, Ubuntu USN-62-1, etc.). The OpenVAS data show a base CVSS v2 of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P...

CAN-2005-0108

CVE-2005-0108 affects Apache mod_auth_radius 1.5.4 and the libpam-radius-auth module. The issue is a remote denial-of-service caused by a malformed RADIUS_REPLY_MESSAGE with a length of 1, triggering a memcpy with a -1 length argument. Public records outside the initial doc identify this as an in...

CAN-2005-0077

CVE-2005-0077 affects perl-DBI. Connected advisories (SUSE, Gentoo, FreeBSD, Debian, Ubuntu) indicate the issue is tied to insecure temporary-file handling in the module. Remediation in affected distros includes applying patches or updates (e.g., SUSE YOU patch 9838; Debian DSA 658-1; Ubuntu USN-...

CAN-2005-0004

CVE-2005-0004 affects MySQL: the mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other legacy 3.x series enables a local user to read/overwrite arbitrary files via a symlink attack on temporary files. Root cause is insecure handling of temporary files ...

CAN-2005-0078

CVE-2005-0078 refers to a KDE screensaver issue disclosed in early KDE/kdelibs/kdebase advisories. The KDE screensaver (kscreensaver) in KDE up to version 3.0.5 fails to properly check the return value from a critical function, enabling a local attacker with physical access to crash the screensav...

CAN-2005-0079

CVE-2005-0079 targets the xtrlock utility. The OpenVAS/NVD/OSV reports describe a buffer overflow in xtrlock 2.0 that allows local users to cause a denial of service (crash) and hijack the desktop session. Exploitation details are not provided in the supplied documents. Debian advisory DSA-649-1 ...

CAN-2005-0095

CVE-2005-0095 affects Squid: a vulnerability in the Web Cache Communication Protocol (WCCP) message parsing can trigger a memory access exception, potentially causing a denial-of-service. Exploitation is described as using a specially crafted WCCP I_SEE_YOU message to crash the Squid process. Rem...

CAN-2005-0018

CVE-2005-0018 corresponds to the f2c package (version 3.1) where the f2 shell script allows local users to read arbitrary files via a symlink attack on temporary files. Multiple connected sources (SU​SE CVE entry, Debian/DSA alerts, NVD/OSV entries) confirm this vulnerability affecting the f2c/ f...

CAN-2005-0071

The CVE-2005-0071 entry applies to Video Disk Recorder (VDR) prior to version 1.2.6. The vulnerability is that VDR did not securely create files, allowing a local attacker to overwrite arbitrary files via insecure file handling. Public records (OSV OSV-) summarize: vdr before 1.2.6 does not secur...