# CVEs published 2005-01-06 27 CVEs were published on January 6, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2004-1236](https://cve.now/CVE-2004-1236.md): Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers… (no CVSS) - [CVE-2004-1305](https://cve.now/CVE-2004-1305.md): The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow… (no CVSS) - [CVE-2004-1312](https://cve.now/CVE-2004-1312.md): A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause… (no CVSS) - [CVE-2004-1318](https://cve.now/CVE-2004-1318.md): Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and… (no CVSS) - [CVE-2004-1319](https://cve.now/CVE-2004-1319.md): The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a… (no CVSS) - [CVE-2004-1320](https://cve.now/CVE-2004-1320.md): Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers to gain… (no CVSS) - [CVE-2004-1321](https://cve.now/CVE-2004-1321.md): The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote… (no CVSS) - [CVE-2004-1322](https://cve.now/CVE-2004-1322.md): Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows… (no CVSS) - [CVE-2004-1323](https://cve.now/CVE-2004-1323.md): Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large… (no CVSS) - [CVE-2004-1324](https://cve.now/CVE-2004-1324.md): The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer… (no CVSS) - [CVE-2004-1325](https://cve.now/CVE-2004-1325.md): The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and… (no CVSS) - [CVE-2004-1326](https://cve.now/CVE-2004-1326.md): Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter. (no CVSS) - [CVE-2004-1327](https://cve.now/CVE-2004-1327.md): Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that… (no CVSS) - [CVE-2004-1328](https://cve.now/CVE-2004-1328.md): Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges. (no CVSS) - [CVE-2004-1329](https://cve.now/CVE-2004-1329.md): Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag\_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through… (no CVSS) - [CVE-2004-1330](https://cve.now/CVE-2004-1330.md): Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username. (no CVSS) - [CVE-2004-1331](https://cve.now/CVE-2004-1331.md): The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning"… (no CVSS) - [CVE-2004-1332](https://cve.now/CVE-2004-1332.md): Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute… (no CVSS) - [CVE-2004-1333](https://cve.now/CVE-2004-1333.md): Integer overflow in the vc\_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service… (no CVSS) - [CVE-2004-1334](https://cve.now/CVE-2004-1334.md): Integer overflow in the ip\_options\_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel… (no CVSS) - [CVE-2004-1335](https://cve.now/CVE-2004-1335.md): Memory leak in the ip\_options\_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory… (no CVSS) - [CVE-2004-1336](https://cve.now/CVE-2004-1336.md): The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite… (no CVSS) - [CVE-2004-1337](https://cve.now/CVE-2004-1337.md): The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is… (no CVSS) - [CVE-2004-1338](https://cve.now/CVE-2004-1338.md): The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using… (no CVSS) - [CVE-2004-1339](https://cve.now/CVE-2004-1339.md): SQL injection vulnerability in the (1) MDSYS.SDO\_GEOM\_TRIG\_INS1 and (2) MDSYS.SDO\_LRS\_TRIG\_INS default triggers in Oracle 9i and 10g… (no CVSS) - [CVE-2005-0021](https://cve.now/CVE-2005-0021.md): Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8… (no CVSS) - [CVE-2005-0022](https://cve.now/CVE-2005-0022.md): Buffer overflow in the spa\_base64\_to\_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2005-01-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.