# CVEs published 2004-04-06

11 CVEs were published on April 6, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0648](https://cve.now/CVE-2003-0648.md): Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code. (no CVSS)
- [CVE-2004-0183](https://cve.now/CVE-2004-0183.md): TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with… (no CVSS)
- [CVE-2004-0184](https://cve.now/CVE-2004-0184.md): Integer underflow in the isakmp\_id\_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an… (no CVSS)
- [CVE-2004-0366](https://cve.now/CVE-2004-0366.md): SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements. (no CVSS)
- [CVE-2004-0370](https://cve.now/CVE-2004-0370.md): The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options… (no CVSS)
- [CVE-2004-0371](https://cve.now/CVE-2004-0371.md): Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which… (no CVSS)
- [CVE-2004-0374](https://cve.now/CVE-2004-0374.md): Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL… (no CVSS)
- [CVE-2004-0376](https://cve.now/CVE-2004-0376.md): oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value. (no CVSS)
- [CVE-2004-0377](https://cve.now/CVE-2004-0377.md): Buffer overflow in the win32\_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote… (no CVSS)
- [CVE-2004-0380](https://cve.now/CVE-2004-0380.md): The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain… (no CVSS)
- [CVE-2004-0381](https://cve.now/CVE-2004-0381.md): mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2004-04-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.