# CVEs published 2004-01-15

23 CVEs were published on January 15, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0819](https://cve.now/CVE-2003-0819.md): Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute… (no CVSS)
- [CVE-2003-0965](https://cve.now/CVE-2003-0965.md): Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies… (no CVSS)
- [CVE-2003-0989](https://cve.now/CVE-2003-0989.md): tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different… (no CVSS)
- [CVE-2003-0992](https://cve.now/CVE-2003-0992.md): Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of… (no CVSS)
- [CVE-2003-1029](https://cve.now/CVE-2003-1029.md): The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory… (no CVSS)
- [CVE-2003-1030](https://cve.now/CVE-2003-1030.md): Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long… (no CVSS)
- [CVE-2004-0054](https://cve.now/CVE-2004-0054.md): Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial… (no CVSS)
- [CVE-2004-0055](https://cve.now/CVE-2004-0055.md): The print\_attr\_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2004-0056](https://cve.now/CVE-2004-0056.md): Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000… (no CVSS)
- [CVE-2004-0057](https://cve.now/CVE-2004-0057.md): The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a… (no CVSS)
- [CVE-2004-0058](https://cve.now/CVE-2004-0058.md): Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the… (no CVSS)
- [CVE-2004-0059](https://cve.now/CVE-2004-0059.md): Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite… (no CVSS)
- [CVE-2004-0060](https://cve.now/CVE-2004-0060.md): WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash) via a large POST request. (no CVSS)
- [CVE-2004-0061](https://cve.now/CVE-2004-0061.md): WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with a trailing . (no CVSS)
- [CVE-2004-0062](https://cve.now/CVE-2004-0062.md): Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause… (no CVSS)
- [CVE-2004-0064](https://cve.now/CVE-2004-0064.md): The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files… (no CVSS)
- [CVE-2004-0065](https://cve.now/CVE-2004-0065.md): Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and… (no CVSS)
- [CVE-2004-0066](https://cve.now/CVE-2004-0066.md): phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php… (no CVSS)
- [CVE-2004-0067](https://cve.now/CVE-2004-0067.md): Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web… (no CVSS)
- [CVE-2004-0069](https://cve.now/CVE-2004-0069.md): Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format… (no CVSS)
- [CVE-2004-0071](https://cve.now/CVE-2004-0071.md): Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read… (no CVSS)
- [CVE-2004-0072](https://cve.now/CVE-2004-0072.md): Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \\.. (no CVSS)
- [CVE-2004-0073](https://cve.now/CVE-2004-0073.md): PHP remote file inclusion vulnerability in (1) config.php and (2) config\_page.php for EasyDynamicPages 2.0 allows remote attackers to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2004-01-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.