# CVEs published 2006-01-23

8 CVEs were published on January 23, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1571](https://cve.now/CVE-2002-1571.md): The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on proc (no CVSS)
- [CVE-2005-3356](https://cve.now/CVE-2005-3356.md): The mq\_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of mult (no CVSS)
- [CVE-2005-3628](https://cve.now/CVE-2005-3628.md): Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppl (no CVSS)
- [CVE-2006-0036](https://cve.now/CVE-2006-0036.md): ip\_nat\_pptp in the PPTP NAT helper (netfilter/ip\_nat\_helper\_pptp.c) in Linux kernel 2.6.14, and other versions, allows remote attackers to c (no CVSS)
- [CVE-2006-0037](https://cve.now/CVE-2006-0037.md): ip\_nat\_pptp in the PPTP NAT helper (netfilter/ip\_nat\_helper\_pptp.c) in Linux kernel 2.6.14, and other versions, allows local users to cause (no CVSS)
- [CVE-2004-0592](https://cve.now/CVE-2004-0592.md): The tcp\_find\_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and (no CVSS)
- [CVE-2005-3653](https://cve.now/CVE-2005-3653.md): Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before (no CVSS)
- [CVE-2006-0378](https://cve.now/CVE-2006-0378.md): Cross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to inject arbitrary web script or HTML via the pro (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.