# CVEs published 2004-01-06

4 CVEs were published on January 6, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0990](https://cve.now/CVE-2003-0990.md): The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters (no CVSS)
- [CVE-2003-1023](https://cve.now/CVE-2003-1023.md): Stack-based buffer overflow in vfs\_s\_resolve\_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later ver (no CVSS)
- [CVE-2003-1024](https://cve.now/CVE-2003-1024.md): Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gai (no CVSS)
- [CVE-2003-1025](https://cve.now/CVE-2003-1025.md): Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-01-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.