# CVEs published 2004-04-16

30 CVEs were published on April 16, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2002-0385](https://cve.now/CVE-2002-0385.md): Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of… (no CVSS)
- [CVE-2003-0533](https://cve.now/CVE-2003-0533.md): Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service… (no CVSS)
- [CVE-2003-0663](https://cve.now/CVE-2003-0663.md): Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allows remote attackers… (no CVSS)
- [CVE-2003-0719](https://cve.now/CVE-2003-0719.md): Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft… (no CVSS)
- [CVE-2003-0806](https://cve.now/CVE-2003-0806.md): Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member… (no CVSS)
- [CVE-2003-0807](https://cve.now/CVE-2003-0807.md): Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0… (no CVSS)
- [CVE-2003-0906](https://cve.now/CVE-2003-0906.md): Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0… (no CVSS)
- [CVE-2003-0907](https://cve.now/CVE-2003-0907.md): Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute… (no CVSS)
- [CVE-2003-0908](https://cve.now/CVE-2003-0908.md): The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary… (no CVSS)
- [CVE-2003-0909](https://cve.now/CVE-2003-0909.md): Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the… (no CVSS)
- [CVE-2003-0910](https://cve.now/CVE-2003-0910.md): The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows… (no CVSS)
- [CVE-2004-0109](https://cve.now/CVE-2004-0109.md): Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to… (no CVSS)
- [CVE-2004-0116](https://cve.now/CVE-2004-0116.md): An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers… (no CVSS)
- [CVE-2004-0117](https://cve.now/CVE-2004-0117.md): Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote… (no CVSS)
- [CVE-2004-0118](https://cve.now/CVE-2004-0118.md): The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures… (no CVSS)
- [CVE-2004-0119](https://cve.now/CVE-2004-0119.md): The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to… (no CVSS)
- [CVE-2004-0120](https://cve.now/CVE-2004-0120.md): The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to… (no CVSS)
- [CVE-2004-0123](https://cve.now/CVE-2004-0123.md): Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote… (no CVSS)
- [CVE-2004-0124](https://cve.now/CVE-2004-0124.md): The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via… (no CVSS)
- [CVE-2004-0155](https://cve.now/CVE-2004-0155.md): The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA… (no CVSS)
- [CVE-2004-0177](https://cve.now/CVE-2004-0177.md): The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in… (no CVSS)
- [CVE-2004-0178](https://cve.now/CVE-2004-0178.md): The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle… (no CVSS)
- [CVE-2004-0179](https://cve.now/CVE-2004-0179.md): Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3)… (no CVSS)
- [CVE-2004-0180](https://cve.now/CVE-2004-0180.md): The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use… (no CVSS)
- [CVE-2004-0197](https://cve.now/CVE-2004-0197.md): Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database… (no CVSS)
- [CVE-2004-0385](https://cve.now/CVE-2004-0385.md): Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote… (no CVSS)
- [CVE-2004-0387](https://cve.now/CVE-2004-0387.md): Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player… (no CVSS)
- [CVE-2004-0388](https://cve.now/CVE-2004-0388.md): The mysqld\_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2004-0391](https://cve.now/CVE-2004-0391.md): Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username… (no CVSS)
- [CVE-2004-0403](https://cve.now/CVE-2004-0403.md): Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2004-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.