CAN-2005-1856

The CVE-2005-1856 issue affects backup-manager (versions 0.5.8 and earlier) where the CD-burning feature logs to a fixed filename in a world-writable directory, allowing local users to overwrite log files via a symlink attack. This is documented across multiple sources (Debian DSA-787-1, OSV, NVD...

CAN-2005-2641

The CAN-2005-2641 entry corresponds to a pam_ldap authentication bypass vulnerability. The connected documents confirm: the pam_ldap module before version 180 does not properly handle a new PasswordPolicyControl, enabling possible privilege escalation via authentication bypass. The impact stated ...

CAN-2005-2656

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, enabling local users to cause a denial of service (disk consumption) and potentially perform other unauthorized activities. Remediation: upgrade to 1.0.6 or later as indicated in multiple CVE records (e.g....

CAN-2005-2390

CVE-2005-2390 corresponds to ProFTPD format-string vulnerabilities described in multiple advisories. The connected data confirms two primary issues: (1) a format-string vulnerability in the shutdown message display, and (2) a format-string vulnerability involving mod_sql when retrieving messages ...

CAN-2005-2693

CVE-2005-2693 refers to an insecure temporary file usage in cvsbug, the CVS graphical frontend component of gcvs. The issue allows a local attacker to exploit insecure temp files to execute arbitrary instructions as the user running cvsbug, potentially enabling privilege abuse. Public disclosures...

CAN-2005-2657

CVE-2005-2657 corresponds to a design-error in common-lisp-controller (versions 4.18 and earlier) that allows a local user to compile malicious code into a cache directory, which can be executed by another user who has not run Common Lisp before. Public advisories (DSA-811-1/2) describe a local p...

CAN-2005-2496

CVE-2005-2496 is an ntp privilege-escalation issue caused when ntpd is run with the -u option using a string to specify the group, causing it to run with the user’s group ID instead of the intended group. Public advisories (RHSA-2006:0393, DSA-801-1, CES A-2006:0393, USN/OSV references) document ...

CAN-2005-2796

CVE-2005-2796 is part of multiple advisories affecting Squid (notably Debian DSA-809-1 and Gentoo/CentOS advisories). The publicly documented issues include: (1) a denial of service via specially crafted requests (CVE-2005-2796) and (2) an additional related issue (CVE-2005-2794) involving aborte...

CAN-2005-2658

CVE-2005-2658 is a buffer overflow in Turquoise SuperStat (turqstat) prior to 2.2.x. Debian advisories describe remote exploitation via a crafted NNTP server that could execute arbitrary code. Public records cite fixed versions per distribution: 2.2.1woody1 (woody), 2.2.2sarge1 (sarge), and 2.2.4...

CAN-2005-2672

CVE-2005-2672 concerns the lm_sensors project, where a bug in the pwmconfig tool creates a temporary file insecurely, allowing potential tampering. Documented in multiple advisories (Debian DSA-814-1, Red Hat RHSA-2005:825, CentOS CESA-2005:825, Fedora 2005-1054/1053), the issue affects lm_sensor...

CAN-2005-2918

The CVE-2005-2918 entry relates to gtkdiskfree, a GNOME tool for showing free disk space. The vulnerability is insecure temporary file creation in gtkdiskfree, which could allow a local attacker to overwrite a file with the caller’s privileges. Affected package: gtkdiskfree. Public advisories (DS...

CAN-2005-2820

CAN-2005-2820 affects the courier/sqwebmail stack. The vulnerability arises from missing input sanitisation that, via Internet Explorer Conditional Comment handling in SqWebmail, can cause hidden JavaScript execution when a user views a malicious email. This is a remote cross-site scripting issue...

CAN-2005-2317

The CVE-2005-2317 entry concerns shorewall, a firewall tool. The issue is a programming error in shorewall that can allow bypass of MAC-based controls: when MACLIST_DISPOSITION is set to ACCEPT or MACLIST_TTL is non-zero, packets from hosts that fail or pass MAC verification could pass through th...

CAN-2005-2491

CVE-2005-2491 describes an integer overflow in the PCRE library that is embedded in Python (and is also referenced in Exim advisories). The vulnerability arises when processing specially crafted regular expressions, potentially allowing an attacker to execute arbitrary code with the privileges of...

CAN-2005-2534

Affected software: OpenVPN (Windows and other platforms) with versions prior to 2.0.1. Vulnerabilities tied to CVE-2005-2531 to CVE-2005-2534 involve denial-of-service scenarios due to programming errors in certificate handling, packet decryption, dev tap memory exhaustion, and the --duplicate-cn...

CAN-2005-2794

CVE-2005-2794 is referenced in multiple OpenVAS entries tied to Squid. The connected documents indicate a vulnerability in Squid where certain aborted requests that trigger an assert may allow remote attackers to cause a denial of service, with CVE-2005-2796 also noted in several advisories. Thes...

CAN-2005-1849

Summary of CVE-2005-1849 : The vulnerability affects the zlib library (notably version 1.2.2) where the inflating of certain invalid input can cause a crash due to an invalid or oversized dynamic tree, enabling a denial of service. This is documented in multiple connected sources (e.g., F5 adviso...

CAN-2005-2917

CVE-2005-2917 affects the Squid proxy server. The issue stems from improper handling of certain NTLM authentication requests, allowing a remote attacker to terminate the Squid process and temporarily disrupt proxy services (DoS). The vulnerability is documented across multiple advisories (Debian ...

CAN-2005-2558

CAN-2005-2558 corresponds to a MySQL CREATE FUNCTION init_syms Buffer Overflow vulnerability. The core issue is improper boundary handling when processing CREATE FUNCTION statements in the MySQL UDF mechanism, allowing a remote attacker who has certain privileges on the MySQL server to cause a de...

CAN-2005-1229

Summary (CVE-2005-1229 family) The cpio utility is affected by multiple issues reported across advisories. The primary path traversal flaw (CVE-2005-1229) occurs when extracting archives with an unsafe pathname, even with --no-absolute-filenames, allowing an attacker to place files in arbitrary w...