CAN-2003-0694

CVE-2003-0694 maps to the Sendmail prescan() vulnerability that allows remote attackers to execute arbitrary code via buffer overflow in parseaddr.c. Public references in Debian DSA-384 confirm remote-code-execution possibility in Sendmail, and Metasploit notes frame it as a DoS PoC for some vers...

CAN-2003-0693

CVE-2003-0693 is only described in the Initial CAN entry as a reserved placeholder; the Connected documents reference CVE-2003-0693 within OpenSSH and Debian advisories (e.g., DSA-382/DSA-383, OpenVAS entries) but do not provide concrete technical details (affected product/version, root cause, ex...

CAN-2003-0780

CVE-2003-0780 concerns a buffer overflow in MySQL triggered by processing a long Password field in the mysql schema, exploitable by an attacker with ALTER TABLE privileges. Affected are MySQL 3.23.x and 4.0.x families prior to fixed versions. Public advisories indicate upgrading to MySQL 3.23.58 ...

CAN-2003-0899

thttpd contains a buffer overflow in defang (libhttpd.c) affecting versions 2.21–2.23b1. This remote code execution is triggered by requests containing '' which are expanded to . Public advisories from SUSE (CVE-2003-0899) and Debian (DSA-396) indicate a patch/update is available for remediation;...

CAN-2004-0084

Connected documents confirm CVE-2004-0084 is part of a set of XFree86/X server vulnerabilities (CVE-2004-0083, CVE-2004-0106, CVE-2004-0084) affecting multiple OS families (FreeBSD, Red Hat, Slackware, HP-UX). The OpenVAS entries describe the advisories as requiring updates to the XFree86-Server ...

CAN-2003-0795

CVE-2003-0795 is a real denial-of-service issue affecting Zebra (and its GNU continuation Quagga) where a telnet management delimiter with no data can crash the Zebra process. The issue is remotely triggerable via the telnet CLI and is tracked together with CAN-2003-0858 (netlink handling). Publi...

CAN-2003-1029

CVE-2003-1029 affects the L2TP parser in tcpdump up to version 3.8.1 and earlier. The vulnerability arises from the l2tp_avp_print handling of invalid data in UDP port 1701, where a bad length value can trigger an infinite loop and excessive memory usage, enabling a remote attacker to cause a den...

CAN-2003-0971

Technical details for CVE-2003-0971 are not publicly available in the provided documents. Monitor for updates.

CAN-2003-0038

CAN-2003-0038 is a reserved entry linked to Mailman cross-site scripting via CGI parameters (notably affecting version ranges documenting XSS in admin/web interfaces). Connected advisories indicate Mailman XSS vulnerabilities through parameters like email and language, with related notes that an ...

CAN-2004-0184

tcpdump prior to version 3.8.1 is affected by CVE-2004-0184 due to an integer underflow in the ISAKMP ID payload handling (isakmp_id_print). This can allow remote attackers to crash the tcpdump process (denial of service), typically when verbose mode (-v) is used. The vulnerability is documented ...

CAN-2004-0179

CVE-2004-0179 is associated with format string vulnerabilities in the neon webdav client library, exploited via crafted responses. Connected documents note affected components include neon (and apps like cadaver/subversion) and cite CVE-2004-0398 as a related ID in multiple advisories. Reported C...

CAN-2004-0595

CVE-2004-0595 is described in connected records as a cross-site scripting vulnerability involving PHP’s strip_tags function. OpenVAS entries identify the issue under the name “php -- strip_tags cross-site scripting vulnerability,” with CVE-2004-0595 listed among related advisories. The sources al...

CAN-2002-1581

CVE-2002-1581 is a directory traversal vulnerability in mailreader (nph-mr.cgi) affecting Mailreader versions 2.3.20–2.3.31. An attacker could view arbitrary files via .. sequences and a null byte (%00) in the configLanguage parameter. Debian DSA-534-1 patched this in mailreader 2.3.29-5woody1; O...

CAN-2004-0687

Mode C: The CVE-2004-0687/0688 family is associated with OpenMotif. Several OpenMotif-related vulnerabilities affect the libXPM image handling library, causing stack overflows (CVE-2004-0687) and related integer overflow issues (CVE-2004-0688). Public advisories (e.g., SUSE/SLES9 and related Open...

CAN-2005-0116

AWStats vulnerability CVE-2005-0116: in AWStats CGI, the configdir parameter is user-controlled and passed to open(), allowing remote command execution via shell metacharacters. Affects AWStats versions up to 6.2 (and 6.1 in some reports); fixed in 6.3. Remediation: upgrade to AWStats 6.3 or appl...

CAN-2005-0245

Technical details for CVE-2005-0245 are not provided in the supplied documents. Monitor for future updates.

CAN-2005-0256

CVE-2005-0256 affects wu-ftpd 2.6.1 and 2.6.2. A remote attacker can trigger a denial-of-service by sending a glob pattern with a large number of * characters, exploiting wu_fnmatch recursion. Several advisories (Red Hat, Debian, OpenVAS, etc.) reference wu-ftpd DoS via globbing; no explicit patc...

CAN-2003-0854

CVE-2003-0854 is described across multiple connected sources as a memory starvation/denial-of-service issue in wu-ftpd. The root cause is that "/bin/ls" can be invoked from within wu-ftpd in a way that causes unusually large memory consumption, potentially slowing or impacting the FTP server. The...

CAN-2005-0468

CAN-2005-0468 is a heap-based buffer overflow in the env_opt_add function of telnet.c across various BSD-based Telnet clients, allowing remote code execution when a server sends data that requires escaping (overflowing the allocated memory). Related advisory entries (CVE-2005-0469) cover an addit...

CAN-2005-2096

CAN-2005-2096 refers to a zlib buffer overflow vulnerability that can cause a crash via specially crafted compressed streams (e.g., crafted PNG files). Multiple connected advisories confirm this issue across distributions; zlib 1.2 and later is implicated. Adversaries could trigger a denial of se...