# CVEs published 2004-01-14

17 CVEs were published on January 14, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2002-0034](https://cve.now/CVE-2002-0034.md): The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when… (no CVSS)
- [CVE-2002-0712](https://cve.now/CVE-2002-0712.md): Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user… (no CVSS)
- [CVE-2003-0119](https://cve.now/CVE-2003-0119.md): The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote… (no CVSS)
- [CVE-2003-0175](https://cve.now/CVE-2003-0175.md): SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl. (no CVSS)
- [CVE-2003-0368](https://cve.now/CVE-2003-0368.md): Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malformed IP packet with… (no CVSS)
- [CVE-2003-0814](https://cve.now/CVE-2003-0814.md): Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's… (no CVSS)
- [CVE-2003-0815](https://cve.now/CVE-2003-0815.md): Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the… (no CVSS)
- [CVE-2003-0816](https://cve.now/CVE-2003-0816.md): Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a… (no CVSS)
- [CVE-2003-0817](https://cve.now/CVE-2003-0817.md): Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. (no CVSS)
- [CVE-2003-0823](https://cve.now/CVE-2003-0823.md): Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other… (no CVSS)
- [CVE-2003-0902](https://cve.now/CVE-2003-0902.md): Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute… (no CVSS)
- [CVE-2003-0949](https://cve.now/CVE-2003-0949.md): xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute… (no CVSS)
- [CVE-2004-0017](https://cve.now/CVE-2004-0017.md): Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to… (no CVSS)
- [CVE-2004-0041](https://cve.now/CVE-2004-0041.md): The mod\_auth\_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow… (no CVSS)
- [CVE-2004-0042](https://cve.now/CVE-2004-0042.md): vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to… (no CVSS)
- [CVE-2004-0043](https://cve.now/CVE-2004-0043.md): Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and… (no CVSS)
- [CVE-2004-0046](https://cve.now/CVE-2004-0046.md): Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2004-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.