CAN-2004-1379

The CVE CAN-2004-1379 describes a heap overflow in the DVD subpicture decoder of xine-lib (CVE-2004-1379). Public reports in Debian and OpenVAS indicate this could allow remote code execution by handling a malicious MPEG, with Debian noting the issue affects xine-lib and providing fixed packages ...

CAN-2005-0102

CVE-2005-0102 affects Evolution (GNOME) via a flaw in camel-lock-helper. Connected advisories (Ubuntu USN-69-1, Debian DSA-673-1, Gentoo GLSA 200501-35, CentOS/CESA-2005:397) describe an integer/buffer handling issue in camel-lock-helper that could allow local privilege escalation or code executi...

CAN-2005-0089

CVE-2005-0089 is reflected in multiple OpenVAS entries tied to Python updates across Linux distributions (Debian DSA-666-1, Gentoo GLSA 200502-09, SLES9 security updates, FreeBSD ports, Ubuntu USN-73-1). Descriptions indicate the remote host requires updates to Python packages; CVSS base score is...

CAN-2004-1120

The CVE CAN-2004-1120 applies to prozilla (a multi-threaded download accelerator). Multiple buffer overflow flaws could be triggered remotely to execute arbitrary code. Public advisories (e.g., Debian DSA-663-1) document remote code execution via these overflows and list fixed versions: prozilla ...

CAN-2005-0202

CVE-2005-0202 describes a directory traversal in Mailman 2.1.5 and earlier, exploiting the true_path function in private.py to read arbitrary files via crafted path patterns like ../ and .../..//. Affects Mailman 2.1.5 and earlier; remote attackers could access sensitive files if the application ...

CAN-2004-1180

CVE-2004-1180 affects the rwhod daemon in netkit-rwho on little-endian architectures, with a remote denial-of-service possible due to missing input validation in versions before 0.17. The Debian DSA mentions fixed releases (0.17-4woody2 for woody and 0.17-8 for sid); other OpenVAS/NASL entries co...

CAN-2005-0019

CVE-2005-0019 affects hztty, a converter for GB/Big5 and zW/HZ encodings used in a tty session. Debian’s DSA-675-1 notes a local privilege-escalation flaw that can allow non-privileged users to execute arbitrary commands with utmp group privileges on hztty prior to the patched versions. The advis...

CAN-2005-0105

CVE-2005-0105 affects the typespeed package. The Debian advisories (DSA-684-1) describe a local format-string vulnerability in typespeed

CAN-2005-0073

CVE-2005-0073: A buffer overflow in queue.c in sympa 3.3.3 (when running setuid) can allow a local user to execute arbitrary code. Public references describe this as a local privilege escalation vulnerability in Sympa; affected releases include sympa prior to 4.1.3. Mitigation in the cited OpenVA...

CAN-2005-0085

CVE-2005-0085 relates to a cross-site scripting vulnerability in htdig that can be exploited remotely. Public records in connected documents show multiple advisories across distros: Debian: DSA-680-1 and a corresponding Debian security advisory entry for htdig. SUSE: exists as a security update f...

CAN-2005-0639

The CVE entry CVE-2005-0639 concerns the xli image viewer. Connected sources confirm multiple related issues (CVE-2005-0638 and CVE-2005-0639) in xli’s handling of images: inappropriate escaping of shell meta-characters and insufficient validation of image properties, which can cause heap/buffer ...

CAN-2005-0070

CVE-2005-0070 affects synaesthesia (2.1 and earlier) where the binary, installed setuid root, does not drop privileges before processing user configuration and mixer files. The underlying issue is local privilege escalation that allows a local user to read arbitrary files. Debian's DSA-681-1 fixe...

CAN-2005-0372

CVE-2005-0372 is a directory traversal vulnerability in gFTP (GTK+ client). A remote attacker sending crafted directory listings via LIST could cause overwriting of arbitrary files on the victim’s system. The issue affects gFTP prior to the fixed package; multiple advisories (RHSA-2005:410, CESA-...

CAN-2005-0158

CVE-2005-0158 applies to BidWatcher, a tool for bidding on eBay auctions. The vulnerability is a format-string flaw in netstuff.cpp that can be triggered by remote inputs via an eBay HTTP server (or a spoofed server/ MITM), potentially allowing denial of service and arbitrary code execution. Publ...

CAN-2005-0446

CVE-2005-0446 affects Squid 2.5.STABLE8 and earlier, with DoS via crafted DNS responses that trigger a crash during FQDN/ipcache handling. The connected advisories indicate multiple distributions addressing this issue: Ubuntu USN-84-1 (DNS/ACLs and the bad DNS response in DNS resolution), Fedora ...

CAN-2005-0385

CVE-2005-0385 refers to a buffer overflow in luxman, an SVGA-based PacMan clone. The issue is a local root vulnerability triggered by an overly long -f argument, potentially allowing arbitrary code execution as root on affected systems. Debian’s DSA-693-1 describes the fix: version 0.41-17.2 (and...

CAN-2005-0099

CVE-2005-0099 concerns the SDL port of Abuse (abuse-SDL). The advisory detail shows that abuse-SDL before version 2.00 does not drop privileges when creating certain files, allowing local users to create or overwrite arbitrary files. Affected context includes Debian (DSA-691-1) and SUSE entries t...

CAN-2005-0088

CVE-2005-0088 relates to an information leak in mod_python (publisher handle) that could allow remote access to published objects without permission. Multiple OpenVAS entries, Gentoo GLSA 200502-14, and SuSE/FreeBSD advisories describe affected packages such as apache2-mod_python and mod_python a...

CAN-2005-0152

CVE-2005-0152 concerns SquirrelMail 1.2.6. The vulnerability allows remote code execution through URL manipulation, by exploiting an unsanitised input/URL handling, enabling arbitrary code execution with typical web server privileges (e.g., www-data). This is a remote, client-side input handling ...

CAN-2005-2240

CVE-2005-2240 affects xpvm (Graphical console for PVM); xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file. Debian and OSV/OpenVAS entries confirm the vulnerability; fixes exist in xpvm 1.2.5-7.3sarge1 (and 1.2.5-7.2w...