Approved changes feed: RSS · Atom

cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*

part: o version: 5.04 update: *

VendorUbuntu (54779f98-997b-58ec-a561-52dfa4086aae)
ProductUbuntu Linux (68f8e676-51ef-53d1-9a5a-419fa5e6ec2d)
Editionamd64
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3378 vulnerable 2026-06-08 04:49:09.032997 Details available
passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits.
Published: 2006-07-06T20:00:00.000Z
Updated: 2024-08-07T18:23:21.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0151 vulnerable 2026-06-08 04:48:46.059164 Details available
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
Published: 2006-01-09T23:00:00.000Z
Updated: 2024-08-07T16:25:33.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3626 vulnerable 2026-06-08 04:48:41.425055 Details available
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.
Published: 2006-01-06T22:00:00.000Z
Updated: 2024-08-07T23:17:23.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3625 vulnerable 2026-06-08 04:48:41.420753 Details available
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."
Published: 2006-01-06T22:00:00.000Z
Updated: 2024-08-07T23:17:23.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3624 vulnerable 2026-06-08 04:48:41.412367 Details available
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
Published: 2006-01-06T22:00:00.000Z
Updated: 2024-08-07T23:17:23.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0988 vulnerable 2026-06-08 04:48:14.161848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0754 vulnerable 2026-06-08 04:48:13.583197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0109 vulnerable 2026-06-08 04:48:11.416231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.