CAN-2004-1182

HylaFAX contains a vulnerability in hfaxd (CVE-2004-1182) where, if a weak hosts.hfaxd file is used, a remote attacker can authenticate by supplying a crafted username or hostname that matches a regex against the hosts.hfaxd entry without a password. Affected: HylaFAX with weak hosts.hfaxd config...

CAN-2004-1091

CVE-2004-1091 affects Midnight Commander (mc) prior to 4.5.55, allowing remote attackers to cause a denial of service by triggering a null dereference. This is documented in multiple sources (NVD/CVE records) and is part of a set of issues tied to mc as described in OpenVAS and IDS advisories. Th...

CAN-2005-0020

CVE-2005-0020 describes a buffer overflow in playmidi prior to 2.4 that could allow a local user to execute arbitrary code. This vulnerability is documented across multiple sources (NVD, OSV, Debian/DSA entries, CVE listing, and vendor advisories) with the impact restricted to local privilege esc...

CAN-2005-0084

Technical details for CVE-2005-0084 are not provided in the supplied documents. No concrete product/vulnerability information is present. Monitor for updates from the referenced advisories and connected sources for affected products, impact, and fixes.

CAN-2005-0015

CVE-2005-0015 concerns Sword (diatheke CGI) 1.5.7a, where missing input sanitising in the diatheke CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Affected software is Sword under the Debian DSA-650-1 advisory; multiple sources (NVD, OSV, CVE li...

CAN-2004-1027

CVE-2004-1027 is a directory traversal vulnerability in unarj. The issue arises when extracting ARJ archives with the -x option; specially crafted archives can cause files to be created in the parent directory (…/.. paths) and, when used recursively, may overwrite critical system files. Publicly ...

CAN-2005-0005

CVE-2005-0005 is not a standalone hidden entry: connected advisories tie this CVE to ImageMagick-related issues across multiple distributions (Debian DSA-646-1, Gentoo GLSA 200501-26/37, FreeBSD ports, Ubuntu USN-62-1, etc.). The OpenVAS data show a base CVSS v2 of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P...

CAN-2005-0108

CVE-2005-0108 affects Apache mod_auth_radius 1.5.4 and the libpam-radius-auth module. The issue is a remote denial-of-service caused by a malformed RADIUS_REPLY_MESSAGE with a length of 1, triggering a memcpy with a -1 length argument. Public records outside the initial doc identify this as an in...

CAN-2005-0077

CVE-2005-0077 affects perl-DBI. Connected advisories (SUSE, Gentoo, FreeBSD, Debian, Ubuntu) indicate the issue is tied to insecure temporary-file handling in the module. Remediation in affected distros includes applying patches or updates (e.g., SUSE YOU patch 9838; Debian DSA 658-1; Ubuntu USN-...

CAN-2005-0004

CVE-2005-0004 affects MySQL: the mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other legacy 3.x series enables a local user to read/overwrite arbitrary files via a symlink attack on temporary files. Root cause is insecure handling of temporary files ...

CAN-2005-0078

CVE-2005-0078 refers to a KDE screensaver issue disclosed in early KDE/kdelibs/kdebase advisories. The KDE screensaver (kscreensaver) in KDE up to version 3.0.5 fails to properly check the return value from a critical function, enabling a local attacker with physical access to crash the screensav...

CAN-2005-0079

CVE-2005-0079 targets the xtrlock utility. The OpenVAS/NVD/OSV reports describe a buffer overflow in xtrlock 2.0 that allows local users to cause a denial of service (crash) and hijack the desktop session. Exploitation details are not provided in the supplied documents. Debian advisory DSA-649-1 ...

CAN-2005-0095

CVE-2005-0095 affects Squid: a vulnerability in the Web Cache Communication Protocol (WCCP) message parsing can trigger a memory access exception, potentially causing a denial-of-service. Exploitation is described as using a specially crafted WCCP I_SEE_YOU message to crash the Squid process. Rem...

CAN-2005-0018

CVE-2005-0018 corresponds to the f2c package (version 3.1) where the f2 shell script allows local users to read arbitrary files via a symlink attack on temporary files. Multiple connected sources (SU​SE CVE entry, Debian/DSA alerts, NVD/OSV entries) confirm this vulnerability affecting the f2c/ f...

CAN-2005-0071

The CVE-2005-0071 entry applies to Video Disk Recorder (VDR) prior to version 1.2.6. The vulnerability is that VDR did not securely create files, allowing a local attacker to overwrite arbitrary files via insecure file handling. Public records (OSV OSV-) summarize: vdr before 1.2.6 does not secur...

CAN-2005-0076

CVE-2005-0076 corresponds to multiple buffer overflows in the XView library 3.2. These flaws may allow local users to execute arbitrary code via setuid applications that link against XView. Documented in NVD, Debian/SUSE OpenVAS entries, and CVE listings. No exact vulnerable versions beyond XView...

CAN-2004-1379

The CVE CAN-2004-1379 describes a heap overflow in the DVD subpicture decoder of xine-lib (CVE-2004-1379). Public reports in Debian and OpenVAS indicate this could allow remote code execution by handling a malicious MPEG, with Debian noting the issue affects xine-lib and providing fixed packages ...

CAN-2005-0102

CVE-2005-0102 affects Evolution (GNOME) via a flaw in camel-lock-helper. Connected advisories (Ubuntu USN-69-1, Debian DSA-673-1, Gentoo GLSA 200501-35, CentOS/CESA-2005:397) describe an integer/buffer handling issue in camel-lock-helper that could allow local privilege escalation or code executi...

CAN-2005-0089

CVE-2005-0089 is reflected in multiple OpenVAS entries tied to Python updates across Linux distributions (Debian DSA-666-1, Gentoo GLSA 200502-09, SLES9 security updates, FreeBSD ports, Ubuntu USN-73-1). Descriptions indicate the remote host requires updates to Python packages; CVSS base score is...

CAN-2004-1120

The CVE CAN-2004-1120 applies to prozilla (a multi-threaded download accelerator). Multiple buffer overflow flaws could be triggered remotely to execute arbitrary code. Public advisories (e.g., Debian DSA-663-1) document remote code execution via these overflows and list fixed versions: prozilla ...