# CVEs published 2005-05-04

16 CVEs were published on May 4, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1307](https://cve.now/CVE-2004-1307.md): Integer overflow in the TIFFFetchStripThing function in tif\_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2005-0594](https://cve.now/CVE-2005-0594.md): Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code. (no CVSS)
- [CVE-2005-1194](https://cve.now/CVE-2005-1194.md): Stack-based buffer overflow in the ieee\_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2005-1330](https://cve.now/CVE-2005-1330.md): AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes… (no CVSS)
- [CVE-2005-1331](https://cve.now/CVE-2005-1331.md): The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is… (no CVSS)
- [CVE-2005-1332](https://cve.now/CVE-2005-1332.md): Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to… (no CVSS)
- [CVE-2005-1333](https://cve.now/CVE-2005-1333.md): Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to… (no CVSS)
- [CVE-2005-1335](https://cve.now/CVE-2005-1335.md): Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external… (no CVSS)
- [CVE-2005-1336](https://cve.now/CVE-2005-1336.md): Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment… (no CVSS)
- [CVE-2005-1337](https://cve.now/CVE-2005-1337.md): Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive… (no CVSS)
- [CVE-2005-1338](https://cve.now/CVE-2005-1338.md): Mac OS X 10.3.9, when using an LDAP server that does not use ldap\_extended\_operation, may store initial LDAP passwords for new accounts in… (no CVSS)
- [CVE-2005-1339](https://cve.now/CVE-2005-1339.md): lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name. (no CVSS)
- [CVE-2005-1340](https://cve.now/CVE-2005-1340.md): The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to… (no CVSS)
- [CVE-2005-1341](https://cve.now/CVE-2005-1341.md): Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences. (no CVSS)
- [CVE-2005-1342](https://cve.now/CVE-2005-1342.md): The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote… (no CVSS)
- [CVE-2005-1343](https://cve.now/CVE-2005-1343.md): Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-05-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.