2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

CVE IDSeverityCVSSDescription
CVE-2004-0982——Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attac...
CVE-2004-0974——The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users t...
CVE-2004-0939——changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authent...
CVE-2004-0942——Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP G...
CVE-2004-0937——Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers...
CVE-2004-0957——Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes ...
CVE-2004-0950——NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address...
CVE-2004-0960——FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specif...
CVE-2004-0947——Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that conta...
CVE-2004-0941——Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute ar...
CVE-2004-0964——Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to ...
CVE-2004-0963——Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause...
CVE-2004-0962——Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Admin...
CVE-2004-0967——The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Se...
CVE-2004-0966——The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secu...
CVE-2004-0968——The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary ...
CVE-2004-0965——stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allow...
CVE-2004-0961——Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a se...
CVE-2004-0976——Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local us...
CVE-2004-0975——The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows lo...
CVE-2004-0978——Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when use...
CVE-2004-0977——The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attac...
CVE-2004-0972——The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating sys...
CVE-2004-0981——Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary cod...
CVE-2004-0980——Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with c...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now