CAN-2005-0085

CVE-2005-0085 relates to a cross-site scripting vulnerability in htdig that can be exploited remotely. Public records in connected documents show multiple advisories across distros: Debian: DSA-680-1 and a corresponding Debian security advisory entry for htdig. SUSE: exists as a security update f...

CAN-2005-0100

The connected documents tie CVE-2005-0100 to Emacs across multiple advisories (Debian DSA-671-1, SLES9 Emacs update, Gentoo GLSA 200502-20, FreeBSD ports, Gentoo/Debian entries in OpenVAS). They provide CVSS context (base 7.5, vector AV:N/AC:L/Au:N/C:P/I:P/A:P) in OpenVAS entries, and mention upd...

CAN-2005-0363

CVE-2005-0363 affects AWStats (notably versions AWStats 4.0 and 6.2) where remote attackers can execute arbitrary commands via shell metacharacters in the config parameter, due to inadequate input sanitisation. The issue is a CGI/plugin input handling problem in AWStats, enabling remote command e...

CAN-2005-0070

CVE-2005-0070 affects synaesthesia (2.1 and earlier) where the binary, installed setuid root, does not drop privileges before processing user configuration and mixer files. The underlying issue is local privilege escalation that allows a local user to read arbitrary files. Debian's DSA-681-1 fixe...

CAN-2005-0107

The CVE-2005-0107 issue affects bsmtpd (a batched SMTP mailer used with sendmail/postfix) where 2.3 and earlier do not properly sanitize e-mail addresses, allowing remote command execution. Public advisories (e.g., Debian DSA-690-1) note remote exploitation and provide fixed packages (e.g., bsmtp...

CAN-2005-0099

CVE-2005-0099 concerns the SDL port of Abuse (abuse-SDL). The advisory detail shows that abuse-SDL before version 2.00 does not drop privileges when creating certain files, allowing local users to create or overwrite arbitrary files. Affected context includes Debian (DSA-691-1) and SUSE entries t...

CAN-2005-0390

CVE-2005-0390 corresponds to a buffer overflow in Axel (an HTTP/HTTPS download accelerator). The connected documents clearly describe a vulnerability in Axel before version 1.0b where the program’s handling of remote input (specifically in the HTTP redirection/conn.c path) can overflow a buffer a...

CAN-2005-0814

The CVE entry CVE-2005-0814 is connected to multiple advisories and vulnerability checks for the LSH (LSH/Lsh) family. Publicly cited details describe a remote DoS vulnerability affecting lshd in Lysator LSH 1.x/2.x prior to 2.0.1, with reports of issues in various platforms (e.g., FreeBSD ports,...

CAN-2005-1109

CVE-2005-1109 refers to JunkBuster, a HTTP proxy. The vulnerability (affecting JunkBuster before version 2.0.2-r3) arises from heap corruption due to inconsistent use of an internal function, enabling remote attackers to crash the daemon and potentially execute arbitrary code. Impact is a remote ...

CAN-2004-1341

CVE-2004-1341 is a cross-site scripting (XSS) vulnerability in info2www, due to missing input sanitising. The issue affects info2www prior to version 1.2.2.9, with fixed versions in Debian as 1.2.2.9-20woody (woody) and 1.2.2.9-23 (sid). Debian DSAs (DSA-711-1) document remote exploitation via cr...

CAN-2004-1154

CVE-2004-1154 pertains to Samba (versions 2.0.0 through 3.0.9). The OpenVAS entries describe an integer overflow that enables remote code execution. Public details in the connected Nessus/OpenVAS items confirm Samba vulnerability exposure and reference patches (e.g., Solaris patch sets) that miti...

CAN-2005-1349

CVE-2005-1349 is a vulnerability in Convert::UUlib, the Perl interface to uulib, where a buffer overflow could allow remote code execution. Public sources describe exploits against the Convert-UUlib library and indicate affected packages include libconvert-uulib-perl (Debian) with fixes in DSA-72...

CAN-2005-0753

CVE-2005-0753 is a buffer overflow in CVS servers that process version/author data, potentially allowing remote code execution. Affected: CVS server (not clients) across multiple platforms; impact described as remote arbitrary code execution, depending on access method. Public details in Debian/F...

CAN-2005-1858

This CVE affects FUSE (filesystem in userspace): FUSE 2.x before 2.3.0 fails to clear memory from unfilled pages after a read returns a short byte count, potentially allowing local users to disclose sensitive information. The Debian advisory (DSA-744-1) links CVE-2005-1858 to fuse and notes a fix...

CAN-2005-2654

CVE-2005-2654 affects phpldapadmin and allows anonymous access to the LDAP server via login.php with anonymous_bind, even when disable_anon_bind is configured. Related advisories (Debian DSA-790-1, Gentoo GLSA 2005-09-04) describe authentication bypass for phpldapadmin and note updates/upgrades (...

CAN-2005-1853

CVE-2005-1853 affects the Gopher client (gopher.c) in version 3.0.5, where improper creation of temporary files permits local users to gain privileges. Multiple sources (Red Hat advisory, CVE listing, Debian/Debian OSSVOS) confirm the flaw and its local-privilege elevation impact. Debian’s DSA-77...

CAN-2005-1852

CAN-2005-1852 is an integer overflow in libgadu (Gadu library) that affects Kopete/Kdenetwork and ekg-related components. A remote attacker could send specially crafted Gadu-Gadu messages to trigger the overflow, potentially crashing the involved application or executing arbitrary code. Public ad...

CAN-2005-1916

CVE-2005-1916 is evidenced in multiple advisory feeds tied to ekg (Gadu client) vulnerabilities. The issue arises from insecure temporary file creation and an arbitrary command execution path in a contributed script, enabling a local attacker to exploit the vulnerability. Debian’s DSA-760-1 and U...

CAN-2005-2161

CVE-2005-2161 maps to a phpBB2 XSS issue. The Debian advisory (DSA-768-1) reports a remote cross-site scripting vulnerability in phpBB2 (missing input validation) that can inject arbitrary script via nested tags. Affected product: phpBB2; root cause: missing input validation leading to XSS. Remed...

CAN-2005-1937

CVE-2005-1937 appears across multiple advisories tied to Mozilla/Firefox components. Connected documents show CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and references in Ubuntu USN-149-1, Debian DSA-810-1, Gentoo GLSA 200507-24, FreeBSD ports Firefox advisories. Affected products include Firefox...