CAN-2005-2961

CVE-2005-2961 describes a remote code execution risk in prozilla (ProZilla) due to a buffer overflow in the get_string_ahref function when the -ftpsearch option is used. Public sources identify affected versions as ProZilla 1.3.7.4 and possibly earlier; exploitation would occur via a crafted stri...

CAN-2005-2772

CVE-2005-2772 affects the gopher client. Debian advisory DSA-832-1 reports remote buffer overflow vulnerabilities that can be triggered by a malicious Gopher server, with fixes applied in gopher 3.0.7sarge2 (and earlier 3.0.3woody4) across woody/sarge releases. The associated Nessus/NVD/OSV refer...

CAN-2005-2558

CAN-2005-2558 corresponds to a MySQL CREATE FUNCTION init_syms Buffer Overflow vulnerability. The core issue is improper boundary handling when processing CREATE FUNCTION statements in the MySQL UDF mechanism, allowing a remote attacker who has certain privileges on the MySQL server to cause a de...

CAN-2005-2878

CVE-2005-2878 : A format-string vulnerability exists in GNU mailutils imap4d’s handling of IMAP SEARCH commands. An authenticated attacker could execute arbitrary code on the target system with the imap4d privileges. Affected products: mailutils imap4d (Debian, Gentoo GLSA, etc.). Root cause: ins...

CAN-2005-2966

Mode C: The CVE CAN-2005-2966 affects the diagram editor dia, where the xfig import code contains three buffer overflow errors that can lead to arbitrary code execution. Debian security advisories (DSA-1025-1 and related notes) document this as a local remote vulnerability and provide fixed packa...

CAN-2005-1229

Summary (CVE-2005-1229 family) The cpio utility is affected by multiple issues reported across advisories. The primary path traversal flaw (CVE-2005-1229) occurs when extracting archives with an unsafe pathname, even with --no-absolute-filenames, allowing an attacker to place files in arbitrary w...

CAN-2005-2663

CVE-2005-2663 affects masqmail, where opening the log file does not relinquish privileges, enabling a local attacker to overwrite arbitrary files via a symlink attack. Root cause: masqmail’s log handling privileges are not dropped, allowing local writes through symlink if/Masqmail opens or writes...

CAN-2005-2992

Arc on Unix up to version 5.21j and earlier creates a temporary file with insecure permissions, allowing a local user to overwrite arbitrary files via a symlink attack (CVE-2005-2992; also CVE-2005-2945). Debian and SuSE advisories reference these vulnerabilities and patches exist (DSA-843-1; arc...

CAN-2005-2971

CVE-2005-2971 affects the RTF importer in KWord/KOffice (KDE Office). The connected OpenVAS/Nessus entries confirm a buffer overflow that can lead to arbitrary code execution. Advisories across distributions document the issue and release patches or updates (e.g., Debian DSA-872-1; Gentoo GLSA 20...

CAN-2005-2963

CVE-2005-2963 affects the mod_auth_shadow Apache module (versions 1.0–2.0) where AuthShadow-enabled configurations cause shadow authentication to apply to all locations using the require group directive, potentially bypassing other access controls. Public disclosures in Debian (DSA-844-1), SUSE/O...

CAN-2005-2367

This CVE (CAN-2005-2367) is part of a set of issues in Ethereal (network traffic analyser). Connected advisories confirm format-string vulnerabilities in several dissectors could allow remote code execution; other CVEs (2360–2366) primarily describe denial-of-service conditions. Remediation acros...

CAN-2005-2661

CVE-2005-2661 affects up-imapproxy (IMAP Proxy). The vulnerability is a format-string error in ParseBannerAndCapability in main.c that affects up-imapproxy versions 1.2.3 and 1.2.4, allowing a remote attacker to execute arbitrary code via crafted banner or capability lines. Advisories indicate re...

CAN-2005-1279

The CAN-2005-1279 entry corresponds to tcpdump vulnerabilities in the BGP dissector (RT_ROUTING_INFO handling) that can cause a denial of service via an infinite loop when processing crafted packets. Public advisories and patches exist across multiple distributions: Debian DSA-850-1/DSA-850 fix t...

CAN-2005-1267

CVE-2005-1267 affects tcpdump (BGP dissector). The vulnerability arises when tcpdump’s bgp_update_print decodes a BGP packet and mishandles a -1 return value from decode_prefix4, allowing remote attackers to trigger an infinite loop and cause a denial of service. This issue has been addressed in ...

CAN-2005-2875

The CVE CAN-2005-2875 corresponds to Py2Play, a peer-to-peer game engine, where a design error allows remote code execution by processing untrusted pickled objects. Public advisories (Debian DSA-856-1 and related Debian/Nessus entries) describe that Py2Play can execute arbitrary code received fro...

CAN-2005-2965

CVE-2005-4803 affects graphviz before 2.2.1, allowing a local user to overwrite arbitrary files through a symlink attack on temporary files. This issue was originally associated with CVE-2005-2965, but multiple sources (SUSE advisory) clarify that CVE-2005-4803 is the correct identifier. Connecte...

CAN-2005-3178

CVE-2005-3178 describes a buffer overflow in XLI/Xloadimage caused by a fixed-length buffer used to store NIFF/XPM image titles during image processing. An attacker could craft a malicious NIFF/XPM image to overflow this buffer, potentially enabling arbitrary code execution with the user’s privil...

CAN-2005-3069

CVE-2005-3069 concerns HylaFax: several scripts (faxcron, recvstats, xferfaxstats) may create insecure temporary files/directories, enabling local users to exploit symlinks. Debian and Gentoo advisories assign this as a local vulnerability in HylaFax 4.x classic releases, with fixed packages prov...

CAN-2005-2967

CVE-2005-2967 is a format-string vulnerability in the CDDB processing component of the xine-lib library. Across multiple distributions (Debian, Ubuntu, Gentoo, Mandrake/Mandriva, FreeBSD ports, etc.), advisories describe that an attacker can cause arbitrary code execution by pointing a vulnerable...

CAN-2005-2933

CVE-2005-2933 is referenced in multiple advisories (RHSA-2006:0276, RHSA-2006:0501, CESA-2005:850, CESA-2006:0276) and is associated with a buffer overflow in the UW-IMAP c-client library used by IMAP/imapd. A specially crafted mailbox name could allow authenticated attackers to execute arbitrary...