CAN-2004-0827

CVE-2004-0827 is associated with ImageMagick across multiple advisories (Debian DSA 547-1, Ubuntu USN-35-1, Red Hat RHSA-2004:636). The connected documents describe a memory corruption issue in image processing (buffer/heap overflow in decoding BMP/DIB/related formats) that could allow arbitrary ...

CAN-2004-0411

CVE-2004-0411 is referenced across multiple advisories (Gentoo GLSA 200405-11, Debian DSA 518-1, Slackware SSA:2004-238-01, Gentoo GLSA 200405-11, FreeBSD/OPenVAS entries) as affecting kdelibs. OpenVAS entries assign a CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and describe the host as missing up...

CAN-2004-0689

CVE-2004-0689 is referenced across multiple security advisories in connected documents related to KDE/kdelibs and kdebase. The OpenVAS entries (Slackware SSA:2004-247-01; SLES9 KDE update; Gentoo GLSA 200408-13; FreeBSD ports; Debian DSA-539) indicate the affected components are KDE libraries (kd...

CAN-2004-0781

CVE-2004-0781 maps to an Icecast XSS in icecast-server (list.cgi) affecting 1.3.12 and earlier. The vulnerability arises from improper input sanitization in the status display, allowing remote attackers to craft a link containing script code that executes in a user’s browser, potentially stealing...

CAN-2004-0564

CVE-2004-0564 refers to the RP-PPPoE (rp-pppoe) component. When pppoe is run with setuid root, it can allow local users to overwrite arbitrary files, per multiple advisories (Debian DSA-557-1, Mandrake MDKSA-2004:145) and OSV/NVD entries. The issue arises only in configurations where rp-pppoe is ...

CAN-2004-0809

CVE-2004-0809 corresponds to a WebDAV/ mod_dav issue in the Apache WebDAV module that could allow a remote attacker to crash the server (Denial of Service) on installations with WebDAV enabled. The connected OpenVAS/Nessus entries reference SuSE SLES9 advisories (patches 5009547 and 5013988) addr...

CAN-2004-0913

CVE-2004-0913 affects ecartis (0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8). An attacker in the same domain could gain administrator privileges and modify configuration. Public documents reference Debian advisory DSA-572-1 and OpenVAS/Nessus entries confirming the...

CAN-2004-0802

Multiple connected entries reference CVE-2004-0802 in imlib2 (notably Debian DSA-552-1 and FreeBSD/OpenVAS entries). The Debian advisory lists CVSS base 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P). Descriptions indicate that a missing update is the issue, but no concrete root-cause, vulnerable versions, or ...

CAN-2004-0837

MODE C The CVE CAN-2004-0837 (CVE-2004-0837) has concrete OpenVAS/related advisories tying it to MySQL in multiple decks. Affected entries/drivers include: SUSE/SLES9 (Security update for MySQL; CVSS 10.0; patches 120293-02, 120292-02), Gentoo GLSA 200410-22 (MySQL), Gentoo/OpenVAS entries refere...

CAN-2004-0851

The CVE refers to Net-Acct and concerns insecure temporary file creation that enables local users to overwrite arbitrary files via a symlink attack on temporary files. Root cause: insecure handling of temporary file creation in Net‑Acct before version 0.71. The issue is local in scope and affects...

CAN-2004-0886

CVE-2004-0886 concerns integer overflow bugs in libtiff used by the kdegraphics/kfax code path. The issue could allow memory corruption or arbitrary code execution when a user opens a crafted TIFF file, due to overflows in libtiff’s processing. The affected product is kdegraphics (and its kfax co...

CAN-2004-0916

CVE-2004-0916 describes a directory traversal vulnerability in cabextract prior to version 1.1. An attacker can construct a cabinet file containing file names with ".." sequences to overwrite arbitrary files on the target system. The connected documents confirm affected software and the basic imp...

CAN-2004-0918

CVE-2004-0918 is a vulnerability in Squid’s SNMP parser. The asn_parse_header function in the SNMP module can be forced to allocate memory incorrectly by SNMP packets with negative or malformed ASN.1 length fields, allowing a remote attacker to cause a denial of service (server restart) and disco...

CAN-2004-0983

CVE-2004-0983 is discussed across OpenVAS/NESSUS entries and JVNDB as a Ruby CGI DoS issue. The underlying problem is Ruby’s CGI handling (cgi.rb) entering an infinite loop due to improper input validation, enabling a Denial of Service. Public documents describe the issue and advise updating/reme...

CAN-2004-0964

CVE-2004-0964 concerns a stack-based buffer overflow in the Zinf Audio Player (formerly freeamp) version 2.2.1. The vulnerability arises from insufficient bounds checking when processing a specially crafted PLS playlist file. A remote attacker could exploit this by convincing a user to open a mal...

CAN-2004-1001

CVE-2004-1001 concerns the Shadow project: a vulnerability in the passwd_check function present in Shadow 4.0.4.1 and possibly earlier versions (before 4.0.5) that can allow local users to perform unauthorized actions when pam_chauthtok error handling is faulty. Public advisories (Debian DSA-585-...

CAN-2004-0623

CVE-2004-0623 is a format-string vulnerability in GNU GNATS 4.00 that can allow remote code execution via specially crafted log data (syslog). Public advisories (Debian DSA-590-1, FreeBSD/Nessus entries, NVD) confirm impact and require updating GNATS to a patched release; exploitation details and...

CAN-2004-0970

CVE-2004-0970 concerns the gzip package: the (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package allow local users to overwrite files via a symlink attack on temporary files. This is a local privilege/overwrite issue, not remote code execution. The vulnerability is tied to the handling...

CAN-2004-1051

CVE-2004-1051 affects sudo before 1.6.8p2, enabling local users to execute arbitrary commands by exploiting how bash environments can define functions with the same names as commands via () style variables. Public records in NVD confirm the vulnerability in sudo, with Debian advisories (DSA 596-1...

CAN-2002-0986

CVE-2002-0986 concerns the PHP mail() function in PHP 4.x up to 4.2.2, which does not filter ASCII control characters from its arguments. This could allow remote attackers to modify mail message content, including headers, and potentially use PHP as a “spam proxy.” The connected documents confirm...