CAN-2005-1686

CVE-2005-1686 is a format-string vulnerability in gedit (GNOME text editor) affecting multiple platforms. Connected advisories note a flaw in gedit’s filename handling that could permit arbitrary code execution. Public fixes exist across affected OS families, including Solaris patches (e.g., 1202...

CAN-2005-1916

CVE-2005-1916 is evidenced in multiple advisory feeds tied to ekg (Gadu client) vulnerabilities. The issue arises from insecure temporary file creation and an arbitrary command execution path in a contributed script, enabling a local attacker to exploit the vulnerability. Debian’s DSA-760-1 and U...

CAN-2005-2320

CVE-2005-2320 affects the WebCalendar PHP-based calendar. Multiple sources (RH CVE entry and Debian security advisories) describe an authorization failure where accessing the file assistant_edit.php can disclose sensitive information to unauthorized users. The OpenVAS entries reference related ad...

CAN-2005-2277

CVE-2005-2277 affects Nokia Affix BTFTP (Bluetooth FTP client) in AS platforms; root cause is missing input sanitisation before executing shell commands, allowing remote attackers to run arbitrary commands via shell metacharacters in the PUT filename. Affected: Affix BTFTP 2.1.2 and 3.2.0. Mitiga...

CAN-2005-2302

PowerDNS (pdns) versions before 2.9.18 are affected by CAN-2005-2302. When recursion is allowed only for a restricted IP range, the server may mishandle queries from clients denied recursion, causing a temporary blanking of answers for clients that are permitted to recurse. This description is su...

CAN-2005-0469

CVE-2005-0469 is a reported buffer overflow in the LINEMODE handling of telnet clients. Several BSD-based telnet clients exhibit a vulnerability in the slc_add_reply function that can be triggered by a reply containing a large number of SLC commands, potentially allowing remote code execution. Th...

CAN-2005-1854

CVE-2005-1854 corresponds to a Debian apt-cacher remote command execution vulnerability (missing input sanitising) affecting Debian 3.1. Exploitation could allow remote code execution as user www-data on the caching host. Debian fixed this in apt-cacher versions 0.9.4sarge1 and 0.9.10 for sid, wi...

CAN-2005-2724

CVE-2005-2724 is a real cross-site scripting (XSS) issue in SqWebmail, part of the Courier suite. The vulnerability arises from missing input sanitising in the handling of file attachments, enabling a remote attacker to inject script/HTML that may execute in a user’s browser when attachments are ...

CAN-2005-2370

CVE-2005-2370 is a memory-alignment related denial-of-service in the Gadu-Gadu component (libgadu/ekg) used by ekg/gaim. Affected architectures include SPARC; impact is remote DoS/crash. Debian/Ubuntu advisories document multiple releases affected (Sarge, Etch, Sid) and provide patches in ekg pac...

CAN-2005-2231

CVE-2005-2231 is linked to the heartbeat component in High-Availability Linux deployments. Debi an advisory DSA-761-1/761-2 describes insecure temporary file creation in heartbeat, with fixes provided for older Debian releases (e.g., 1.2.3-9sarge2 for sarge). OpenVAS entries (Debian DSA, Gentoo G...

CAN-2005-2335

CVE-2005-2335 describes a buffer overflow in fetchmail’s POP3 UIDL handling code. The vulnerability could allow a malicious POP3 server to crash fetchmail or execute arbitrary code with the user’s privileges. Connected advisories (Debian DSA/DSA-774-1, Ubuntu USN-153-1, CentOS/RHSA, Mandrake/MKDS...

CAN-2005-1937

CVE-2005-1937 appears across multiple advisories tied to Mozilla/Firefox components. Connected documents show CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and references in Ubuntu USN-149-1, Debian DSA-810-1, Gentoo GLSA 200507-24, FreeBSD ports Firefox advisories. Affected products include Firefox...

CAN-2005-2450

CVE-2005-2450 affects Clam AntiVirus (clamav). Technical details across sources show an integer overflow vulnerability in CHM, TNEF, and FSG format handling that can lead to heap corruption, potentially allowing denial of service or remote code execution when processing specially crafted files (e...

CAN-2005-2761

CVE-2005-2761 is associated with phpGroupWare and is documented in Debian DSA-798-1 and related OpenVAS entries. The vulnerability refers to a global cross-site scripting fix designed to protect against malicious scripts embedded in CSS and xmlns across various phpGroupWare components. Remediatio...

CAN-2005-2557

CVE-2005-2557 affects MantisBT (Mantis) versions 0.19.0a1 through 1.0.0a3, where the view_all_set.php component is vulnerable to cross-site scripting due to unsanitized input in the dir parameter. This remote XSS could allow an attacker to inject arbitrary web script or HTML. The connected OpenVA...

CAN-2005-2097

The CVE-2005-2097 issue is a DoS via disk-space exhaustion caused by malformed PDF handling in xpdf and its GTK/GNUpdf frontend (gpdf). Public advisories describe heap-based overflow risks in xpdf/gpdf as related concerns, and Red Hat/CentOS advisories tie the CVE to kpdf/gpdf/xpdf fixes in kdegr...

CAN-2005-1856

The CVE-2005-1856 issue affects backup-manager (versions 0.5.8 and earlier) where the CD-burning feature logs to a fixed filename in a world-writable directory, allowing local users to overwrite log files via a symlink attack. This is documented across multiple sources (Debian DSA-787-1, OSV, NVD...

CAN-2005-2547

CVE-2005-2547 (CAN-2005-2547) affects bluez-utils and related BlueZ components. The vulnerability arises from missing input sanitising, enabling an attacker to craft a remote Bluetooth device name containing shell metacharacters to execute arbitrary commands when the PIN helper is invoked. Affect...

CAN-2005-2151

Summary: CVE-2005-2151 relates to the Courier Mail Server. The Debian/Ubuntu advisories describe a programming error where DNS SPF lookups were not handled correctly, potentially allowing memory corruption and a remote crash. The issue is mitigated in practice by SPF being disabled by default, bu...

CAN-2005-1857

CVE-2005-1857 describes a format-string vulnerability in simpleproxy prior to version 3.4 that could allow a remote attacker, via replies from remote HTTP proxies, to execute arbitrary code. Multiple sources (NVD, CVE list, OSV, Debian/DSA-786-1 advisory, and CERT vulnerability note) corroborate ...