CAN-2004-1014

CVE-2004-1014 affects nfs-utils (statd) where statd did not ignore the SIGPIPE signal, allowing remote attackers to cause a denial-of-service by terminating a TCP connection prematurely. Documented in NFS-related advisories (Debian DSA 606-1, Red Hat RHSA-2005:014, Ubuntu USN-36-1) and noted by N...

CAN-2003-0985

The provided OpenVAS/DSA/Gentoo entries reference CVE-2003-0985 in kernel-related advisories (e.g., Debian DSA 417-1/417-2, Gentoo GLSA 200401-01) affecting 2.4.x kernel packages (kernel-image-2.4.18-1-alpha, kernel-patch-2.4.18-powerpc, etc.). The CVSS base is shown as 7.2 with vector AV:L/AC:L/...

CAN-2003-0972

Mode C: The CAN-2003-0972 entry corresponds to the Debian screen local vulnerability (integer overflow) affecting screen, a VT100/ANSI terminal multiplexer. The connected advisories describe an exploitable condition causing local privilege escalation by overflowing buffers through crafted escape ...

CAN-2004-0852

CVE-2004-0852 describes a buffer overflow in htget 0.93 that allows remote code execution via a crafted URL. Debian's DSA-611-1 fixes this in htget 0.93-1.1woody1. Root cause: improper bounds handling in URL processing. Impact: remote attacker could execute arbitrary code on vulnerable systems. R...

CAN-2004-1000

CVE-2004-1000 (lintian) concerns the Debian lintian checker: it removes the working directory even if it wasn’t created at program start, enabling a local attacker to delete arbitrary files via a symlink attack. This insecure temporary-directory behavior is the root cause. Remediations are provid...

CAN-2004-1076

CVE-2004-1076 affects the Atari800 emulator. The provided sources describe multiple buffer overflows in the RtConfigLoad function in rt-config.c, affecting versions before 1.3.4, allowing local users to execute arbitrary code via large values in the configuration file. Exploitation details are no...

CAN-2004-0994

CVE-2004-0994 refers to multiple integer overflows in xzgv (0.8 and earlier) in image processing, notably in read_prf.c/read_prf handling, which can lead to remote code execution via crafted images. Related documents (GLSA-200501-09, OpenVAS entries, and NVD) confirm the issue and classify the im...

CAN-2004-0998

CVE-2004-0998 is a format-string vulnerability in telnetd-ssl (netkit-telnet-ssl) affecting 0.17 and earlier. The Debian security advisory and Debian tracker entries describe remote arbitrary-code execution as the impact. Remediation in these sources is to upgrade to fixed packages (e.g., 0.17.17...

CAN-2004-1183

CVE-2004-1183 is a documented integer overflow in the tiffdump utility of libtiff (affecting versions prior to the patch). Several advisories (Ubuntu USN-54-1, Red Hat RHSA-2005:035, Gentoo GLSA-200501-06, SUSE-SA:2005:001, Debian/others) describe that processing carefully crafted TIFF images can...

CAN-2005-0016

CVE-2005-0016 describes a buffer overflow in the exported_display function of xatitv in gatos before 0.0.5, allowing local users to execute arbitrary code. The available sources (NVD/OSV/CVE lists and SUSE/OSVDebian/etc.) confirm the affected component and the local-code-execution impact. The pro...

CAN-2004-1182

HylaFAX contains a vulnerability in hfaxd (CVE-2004-1182) where, if a weak hosts.hfaxd file is used, a remote attacker can authenticate by supplying a crafted username or hostname that matches a regex against the hosts.hfaxd entry without a password. Affected: HylaFAX with weak hosts.hfaxd config...

CAN-2005-0064

CAN-2005-0064 pertains to a buffer overflow in Xpdf code (Decrypt::makeFileKey2) used by Xpdf and GPdf, enabling potential remote arbitrary-code execution via crafted PDF files. Debian’s DSAs/Ubuntu Gentoo Trustix advisories cite a fix in xpdf packages (upgrade to a newer Xpdf version) as the rem...

CAN-2004-1027

CVE-2004-1027 is a directory traversal vulnerability in unarj. The issue arises when extracting ARJ archives with the -x option; specially crafted archives can cause files to be created in the parent directory (…/.. paths) and, when used recursively, may overwrite critical system files. Publicly ...

CAN-2004-1264

CVE-2004-1264 affects the chbg utility. Debian/DSA-644-1 reports a local buffer overflow in chbg (config.c/simplify_path) that could allow arbitrary code execution when processing a crafted scenario file. The issue is exploitable remotely via a malicious configuration, with Debian indicating patc...

CAN-2005-0095

CVE-2005-0095 affects Squid: a vulnerability in the Web Cache Communication Protocol (WCCP) message parsing can trigger a memory access exception, potentially causing a denial-of-service. Exploitation is described as using a specially crafted WCCP I_SEE_YOU message to crash the Squid process. Rem...

CAN-2005-0071

The CVE-2005-0071 entry applies to Video Disk Recorder (VDR) prior to version 1.2.6. The vulnerability is that VDR did not securely create files, allowing a local attacker to overwrite arbitrary files via insecure file handling. Public records (OSV OSV-) summarize: vdr before 1.2.6 does not secur...

CAN-2004-1186

CVE-2004-1186 concerns the enscript utility and is documented across multiple feeds as having multiple issues in the same family: unsanitised input enabling arbitrary commands via EPSF pipe, lack of filename sanitisation leading to command execution, and multiple buffer overflows causing crashes....

CAN-2005-0102

CVE-2005-0102 affects Evolution (GNOME) via a flaw in camel-lock-helper. Connected advisories (Ubuntu USN-69-1, Debian DSA-673-1, Gentoo GLSA 200501-35, CentOS/CESA-2005:397) describe an integer/buffer handling issue in camel-lock-helper that could allow local privilege escalation or code executi...

CAN-2005-0074

CAN-2005-0074 corresponds to a buffer overflow in xpcd’s SVGA viewer pcdsvgaview (part of xpcd). The vulnerability arises from a fixed-size buffer overflow that can allow a local user to execute arbitrary code with elevated privileges. Debian’s DSA-676-1 fixes this by updating xpcd-svga to a patc...

CAN-2005-0159

CVE-2005-0159 affects the Debian toolchain-source package (tpkg-* scripts) where insecure temporary file usage allows a local attacker to overwrite arbitrary files via a symlink attack. The Debian security advisories (DSA-679-1) document that the fix is available in toolchain-source versions 3.0....