CVE-2004-0495

Summary: CVE-2004-0495 refers to multiple vulnerabilities in Linux kernel 2.4 and 2.6, identified by the Sparse source-checking tool, that can allow local privilege escalation or access to kernel memory. Affected software: Linux kernel for 2.4 and 2.6 series. Root cause/impact: local attacker cou...

CVE-2005-0750

CVE-2005-0750 affects the Bluetooth driver in the Linux kernel (2.4.6–2.4.30-rc1 and 2.6–2.6.11.5). The bluez_sock_create function fails to validate a negative protocol value, allowing a local user to gain privileges via a crafted socket or socketpair call. Public details appear in multiple advis...

CVE-2004-0817

CVE-2004-0817 describes multiple heap-based buffer overflows in the imlib BMP image handler that allow remote attackers to execute arbitrary code via a crafted BMP file. Connected advisories confirm the affected component is imlib/imlib2 BMP decoding code and reference vendor/security updates (e....

CVE-2004-0884

CVE-2004-0884 affects the Cyrus-SASL libraries (libsasl and libsasl2) up to version 2.1.18. The vulnerability arises because these libraries trust the SASL_PATH environment variable to locate SASL plug-ins, allowing a local attacker to cause arbitrary code execution by pointing SASL_PATH to malic...

CVE-2004-0827

CVE-2004-0827 affects ImageMagick 5.x before 5.4.4 and 6.x before 6.0.6.2, with remote denial of service and potential arbitrary code execution via malformed AVI, BMP, or DIB files. Multiple connected advisories (Ubuntu USN-35-1, Debian DSA 547-1, Red Hat RHSA-2004:480/636, etc.) corroborate buff...

CVE-2000-1134

CVE-2000-1134 concerns multiple shells (tcsh, csh, sh, bash) that follow symlinks when processing here-documents (<

CVE-2005-0373

CVE-2005-0373 describes a buffer overflow in Cyrus-SASL’s DIGEST-MD5 implementation (digestmd5.c, CVS release 1.170, also referred to as digestmda5.c) that was not part of official releases. The flaw allows remote attackers to execute arbitrary code by triggering the overflow in the Digest-MMD5 S...

CVE-2000-1095

CVE-2000-1095 affects modprobe in the modutils 2.3.x package. The vulnerability arises because modprobe uses popen() to invoke the echo program with user-supplied input, allowing unescaped shell metacharacters to be processed via /bin/sh when run through kmod-triggered paths. This can enable a lo...

CVE-2005-0754

CVE-2005-0754 affects KDE’s Kommander: KDE 3.2–3.4.0 allows remote attackers to cause arbitrary code execution by Kommander executing data files without user confirmation. The root cause is untrusted data/file handling by Kommander, enabling remote code execution if a user opens a malicious file....

CVE-2004-1307

CVE-2004-1307 describes a heap-based buffer overflow in libtiff 3.6.1 triggered by a TIFF file using the STRIPOFFSETS flag with many strips, due to an overflow in TIFFFetchStripThing in tif_dirread.c. The vulnerability could allow remote code execution as a result of processing crafted TIFF files...

CVE-2005-0699

The CVE-2005-0699 issue affects Ethereal (Wireshark) up to version 0.10.9 and earlier. It arises from multiple buffer overflows in the dissect_a11_radius function of the CDMA A11 dissector (packet-3g-a11.c). This flaw can allow remote attackers to execute arbitrary code by sending crafted RADIUS ...

CVE-2004-0801

CVE-2004-0801 affects foomatic-rip in Foomatic prior to 3.0.2 running under CUPS; the flaw allows local users or remote attackers with access to CUPS to execute arbitrary commands. The linked SUSE/OpenVAS entries confirm this CVE and reference patches in related updates (e.g., openSUSE hplip upda...

CVE-2004-1337

CVE-2004-1337 concerns the POSIX Capability Linux Security Module (LSM) in the Linux kernel 2.6. If a process is launched before the LSM is loaded, credentials handling can fail, enabling local users to gain elevated privileges (effectively root). The vulnerability is discussed across multiple fe...

CVE-2001-0690

CVE-2001-0690 describes a format-string vulnerability in Exim in batched SMTP mode that can let an unauthenticated remote attacker execute arbitrary code via format strings in SMTP headers. The entry specifies affected Exim versions: 3.22-10 (Red Hat), 3.12 (Debian), and 3.16 (Conectiva). Attack ...

CVE-2001-0439

CVE-2001-0439 affects Licq prior to 1.0.3. The vulnerability stems from how Licq parses received URLs: the URL is passed to the web browser via system() without sufficient input validation, allowing a remote attacker to inject shell metacharacters and execute arbitrary commands. Impact is remote ...

CVE-2001-0128

Zope before 2.2.4 contains a bug in how local roles are computed, enabling bypass of access restrictions and privilege escalation. The issue is documented across multiple sources (NVD/CVE entry and Mandrake MDKSA-2000:086) and affects Zope 2.2.4 and earlier. Remediation is to apply the update to ...

CVE-2001-1374

Summary (concrete details from connected documents): The vulnerability is in the expect utility prior to version 5.32, where it searches for its libraries in /var/tmp before other directories. A local attacker could exploit this by placing a Trojan horse library that mkpasswd would load, potentia...

CVE-2001-0473

CVE-2001-0473 affects the Mutt email client (Imap-related code) prior to version 1.2.5. The vulnerability is a format string issue in the IMAP handling that can allow a remote, malicious IMAP server to execute arbitrary commands on the local machine. The Mandrakelinux MDKSA-2001:031 advisory spec...

CVE-2001-0440

The connected document (MDKSA-2001:032-1) confirms a vulnerability in Licq pre-1.0.3 where received URLs are parsed without sufficient checks and passed to the system() call. This allows remote attackers to cause arbitrary commands to be executed on the client, via crafted URLs, and can lead to d...