CAN-2005-0739

Technical details for CVE-2005-0739 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-1523

CVE-2005-1523 is a format-string vulnerability in the GNU Mailutils imap4d server (also reflected in Debian Gentoo advisories) that may allow a remote attacker to execute arbitrary code with the IMAP service privileges. The connected advisories describe that the issue stems from insufficient sani...

CAN-2005-0523

The CVE-2005-0523 entry pertains to ProZilla (versions up to 1.3.7.3 and earlier). A format string vulnerability in the Location header allows remote attackers to execute arbitrary code with the user’s privileges. Debian’s DSA-719-1 and related advisories fix the issue by upgrading ProZilla to la...

CAN-2005-0892

CVE-2005-0892 describes a buffer overflow in Smail, a mail transfer agent. The public records specify a vulnerability in Smail 3.2.0.120 where a long string in the MAIL FROM command (and possibly other SMTP commands) can allow remote attackers or local users to execute arbitrary code. Public list...

CAN-2005-0392

CVE-2005-0392 maps to the Debian ppxp local privilege escalation. ppxp does not release root privileges when opening potentially user‑supplied log files, enabling a root shell under certain conditions. Debian advisories DSA-725-1/725-2 document fixes: upgrade to ppxp 0.2001080415-10sarge2 (and ne...

CAN-2005-0953

CVE-2005-0953 concerns a race-condition in the bzip2 compressor/decompressor (v1.0.2 and earlier). During decompression in a directory the attacker could manipulate permissions of an unrelated file the user has access to, enabling local privilege modification. A related issue, CVE-2005-1260, desc...

CAN-2005-1121

CVE-2005-1121 is documented in Debian DSA-726-1 for the Oops caching HTTP proxy server. The vulnerability is a format string issue in the MySQL/PgSQL authentication module, exploitable remotely and potentially allowing arbitrary code execution. Debian notes the fix in the oops package (version 1....

CAN-2005-0753

CVE-2005-0753 is a buffer overflow in CVS servers that process version/author data, potentially allowing remote code execution. Affected: CVS server (not clients) across multiple platforms; impact described as remote arbitrary code execution, depending on access method. Public details in Debian/F...

CAN-2005-2040

CVE-2005-2040 pertains to the Heimdal Kerberos implementation. Public details in connected docs indicate a buffer overflow in the Heimdal telnet server that could allow remote code execution, with references in Debian advisory DSA-758-1 and FreeBSD/OpenVAS entries. The advisories caution that aff...

CAN-2005-1992

CVE-2005-1992 concerns Ruby’s XMLRPC server, where an insecure default in utils.rb (and related XMLRPC.iPIMethods handling) can allow a remote attacker to execute arbitrary commands if the server is used in a vulnerable configuration. Public advisories (e.g., RHSA-2005:543, USN-146-1) document th...

CAN-2005-1853

CVE-2005-1853 affects the Gopher client (gopher.c) in version 3.0.5, where improper creation of temporary files permits local users to gain privileges. Multiple sources (Red Hat advisory, CVE listing, Debian/Debian OSSVOS) confirm the flaw and its local-privilege elevation impact. Debian’s DSA-77...

CAN-2005-2277

CVE-2005-2277 affects Nokia Affix BTFTP (Bluetooth FTP client) in AS platforms; root cause is missing input sanitisation before executing shell commands, allowing remote attackers to run arbitrary commands via shell metacharacters in the PUT filename. Affected: Affix BTFTP 2.1.2 and 3.2.0. Mitiga...

CAN-2005-0469

CVE-2005-0469 is a reported buffer overflow in the LINEMODE handling of telnet clients. Several BSD-based telnet clients exhibit a vulnerability in the slc_add_reply function that can be triggered by a reply containing a large number of SLC commands, potentially allowing remote code execution. Th...

CAN-2005-1854

CVE-2005-1854 corresponds to a Debian apt-cacher remote command execution vulnerability (missing input sanitising) affecting Debian 3.1. Exploitation could allow remote code execution as user www-data on the caching host. Debian fixed this in apt-cacher versions 0.9.4sarge1 and 0.9.10 for sid, wi...

CAN-2005-2724

CVE-2005-2724 is a real cross-site scripting (XSS) issue in SqWebmail, part of the Courier suite. The vulnerability arises from missing input sanitising in the handling of file attachments, enabling a remote attacker to inject script/HTML that may execute in a user’s browser when attachments are ...

CAN-2005-2335

CVE-2005-2335 describes a buffer overflow in fetchmail’s POP3 UIDL handling code. The vulnerability could allow a malicious POP3 server to crash fetchmail or execute arbitrary code with the user’s privileges. Connected advisories (Debian DSA/DSA-774-1, Ubuntu USN-153-1, CentOS/RHSA, Mandrake/MKDS...

CAN-2005-2450

CVE-2005-2450 affects Clam AntiVirus (clamav). Technical details across sources show an integer overflow vulnerability in CHM, TNEF, and FSG format handling that can lead to heap corruption, potentially allowing denial of service or remote code execution when processing specially crafted files (e...

CAN-2005-2761

CVE-2005-2761 is associated with phpGroupWare and is documented in Debian DSA-798-1 and related OpenVAS entries. The vulnerability refers to a global cross-site scripting fix designed to protect against malicious scripts embedded in CSS and xmlns across various phpGroupWare components. Remediatio...

CAN-2005-2557

CVE-2005-2557 affects MantisBT (Mantis) versions 0.19.0a1 through 1.0.0a3, where the view_all_set.php component is vulnerable to cross-site scripting due to unsanitized input in the dir parameter. This remote XSS could allow an attacker to inject arbitrary web script or HTML. The connected OpenVA...

CAN-2005-1856

The CVE-2005-1856 issue affects backup-manager (versions 0.5.8 and earlier) where the CD-burning feature logs to a fixed filename in a world-writable directory, allowing local users to overwrite log files via a symlink attack. This is documented across multiple sources (Debian DSA-787-1, OSV, NVD...