2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

CVE IDSeverityCVSSDescription
CVE-2004-0431——Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large ...
CVE-2004-0430——Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitr...
CVE-2004-0427——The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count coun...
CVE-2004-0424——Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows loca...
CVE-2004-0423——The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack ...
CVE-2004-1345——Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local user...
CVE-2004-1346——The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a m...
CVE-2004-1754——The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via...
CVE-2004-0396——Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows...
CVE-2004-0392——racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via...
CVE-2004-0154——rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mo...
CVE-2004-0199——Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which a...
CVE-2004-0038——McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary comma...
CVE-2004-0050——Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS dev...
CVE-2004-0227——Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via ...
CVE-2004-0117——Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2...
CVE-2004-0120——The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows r...
CVE-2004-0157——x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows lo...
CVE-2004-0156——Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays...
CVE-2004-0155——The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not veri...
CVE-2004-0123——Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2...
CVE-2004-0124——The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network ...
CVE-2004-0133——The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the...
CVE-2004-0403——Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet w...
CVE-2004-0405——CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client reques...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now