# CVEs published 2004-12-05

8 CVEs were published on December 5, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0956](https://cve.now/CVE-2004-0956.md): MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening… (no CVSS)
- [CVE-2004-0987](https://cve.now/CVE-2004-0987.md): Buffer overflow in the process\_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2004-1066](https://cve.now/CVE-2004-1066.md): The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a… (no CVSS)
- [CVE-2004-1123](https://cve.now/CVE-2004-1123.md): Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a… (no CVSS)
- [CVE-2004-1127](https://cve.now/CVE-2004-1127.md): Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long… (no CVSS)
- [CVE-2004-1128](https://cve.now/CVE-2004-1128.md): Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename. (no CVSS)
- [CVE-2004-1129](https://cve.now/CVE-2004-1129.md): SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2… (no CVSS)
- [CVE-2004-1130](https://cve.now/CVE-2004-1130.md): Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2004-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.