# CVEs published 2004-06-30

31 CVEs were published on June 30, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0393](https://cve.now/CVE-2004-0393.md): Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format… (no CVSS)
- [CVE-2004-0451](https://cve.now/CVE-2004-0451.md): Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows… (no CVSS)
- [CVE-2004-0454](https://cve.now/CVE-2004-0454.md): Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code. (no CVSS)
- [CVE-2004-0455](https://cve.now/CVE-2004-0455.md): Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql. (no CVSS)
- [CVE-2004-0480](https://cve.now/CVE-2004-0480.md): Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that… (no CVSS)
- [CVE-2004-0493](https://cve.now/CVE-2004-0493.md): The ap\_get\_mime\_headers\_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and… (no CVSS)
- [CVE-2004-0576](https://cve.now/CVE-2004-0576.md): The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2004-0590](https://cve.now/CVE-2004-0590.md): FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and… (no CVSS)
- [CVE-2004-0603](https://cve.now/CVE-2004-0603.md): gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which… (no CVSS)
- [CVE-2004-0604](https://cve.now/CVE-2004-0604.md): The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via… (no CVSS)
- [CVE-2004-0605](https://cve.now/CVE-2004-0605.md): Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier… (no CVSS)
- [CVE-2004-0606](https://cve.now/CVE-2004-0606.md): Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute… (no CVSS)
- [CVE-2004-0607](https://cve.now/CVE-2004-0607.md): The eay\_check\_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow… (no CVSS)
- [CVE-2004-0608](https://cve.now/CVE-2004-0608.md): The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast… (no CVSS)
- [CVE-2004-0609](https://cve.now/CVE-2004-0609.md): rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine… (no CVSS)
- [CVE-2004-0610](https://cve.now/CVE-2004-0610.md): The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection… (no CVSS)
- [CVE-2004-0611](https://cve.now/CVE-2004-0611.md): Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a… (no CVSS)
- [CVE-2004-0612](https://cve.now/CVE-2004-0612.md): The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote… (no CVSS)
- [CVE-2004-0613](https://cve.now/CVE-2004-0613.md): osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a… (no CVSS)
- [CVE-2004-0614](https://cve.now/CVE-2004-0614.md): osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to… (no CVSS)
- [CVE-2004-0615](https://cve.now/CVE-2004-0615.md): Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware… (no CVSS)
- [CVE-2004-0616](https://cve.now/CVE-2004-0616.md): The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive… (no CVSS)
- [CVE-2004-0617](https://cve.now/CVE-2004-0617.md): Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL… (no CVSS)
- [CVE-2004-0618](https://cve.now/CVE-2004-0618.md): FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned… (no CVSS)
- [CVE-2004-0619](https://cve.now/CVE-2004-0619.md): Integer overflow in the ubsec\_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service… (no CVSS)
- [CVE-2004-0620](https://cve.now/CVE-2004-0620.md): Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject… (no CVSS)
- [CVE-2004-0621](https://cve.now/CVE-2004-0621.md): admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list\_user operation with the ulevel parameter… (no CVSS)
- [CVE-2004-0622](https://cve.now/CVE-2004-0622.md): Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain… (no CVSS)
- [CVE-2004-0623](https://cve.now/CVE-2004-0623.md): Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers… (no CVSS)
- [CVE-2004-0624](https://cve.now/CVE-2004-0624.md): PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic\_links5) allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2004-0625](https://cve.now/CVE-2004-0625.md): SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2004-06-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.