# CVEs published 2004-01-14

17 CVEs were published on January 14, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2002-0034](https://cve.now/CVE-2002-0034.md): The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when conver (no CVSS)
- [CVE-2002-0712](https://cve.now/CVE-2002-0712.md): Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which (no CVSS)
- [CVE-2003-0119](https://cve.now/CVE-2003-0119.md): The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attacker (no CVSS)
- [CVE-2003-0175](https://cve.now/CVE-2003-0175.md): SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl. (no CVSS)
- [CVE-2003-0368](https://cve.now/CVE-2003-0368.md): Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malformed IP packet with a (no CVSS)
- [CVE-2003-0814](https://cve.now/CVE-2003-0814.md): Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href (no CVSS)
- [CVE-2003-0815](https://cve.now/CVE-2003-0815.md): Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the create (no CVSS)
- [CVE-2003-0816](https://cve.now/CVE-2003-0816.md): Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a fi (no CVSS)
- [CVE-2003-0817](https://cve.now/CVE-2003-0817.md): Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. (no CVSS)
- [CVE-2003-0823](https://cve.now/CVE-2003-0823.md): Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows (no CVSS)
- [CVE-2003-0902](https://cve.now/CVE-2003-0902.md): Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2003-0949](https://cve.now/CVE-2003-0949.md): xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary (no CVSS)
- [CVE-2004-0017](https://cve.now/CVE-2004-0017.md): Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to perform (no CVSS)
- [CVE-2004-0041](https://cve.now/CVE-2004-0041.md): The mod\_auth\_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote (no CVSS)
- [CVE-2004-0042](https://cve.now/CVE-2004-0042.md): vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identi (no CVSS)
- [CVE-2004-0043](https://cve.now/CVE-2004-0043.md): Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly (no CVSS)
- [CVE-2004-0046](https://cve.now/CVE-2004-0046.md): Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET req (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.