# CVEs published 2004-01-15

23 CVEs were published on January 15, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0819](https://cve.now/CVE-2003-0819.md): Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2003-0965](https://cve.now/CVE-2003-0965.md): Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies a (no CVSS)
- [CVE-2003-0989](https://cve.now/CVE-2003-0989.md): tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerabil (no CVSS)
- [CVE-2003-0992](https://cve.now/CVE-2003-0992.md): Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other (no CVSS)
- [CVE-2003-1029](https://cve.now/CVE-2003-1029.md): The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consump (no CVSS)
- [CVE-2003-1030](https://cve.now/CVE-2003-1030.md): Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication (no CVSS)
- [CVE-2004-0054](https://cve.now/CVE-2004-0054.md): Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of (no CVSS)
- [CVE-2004-0055](https://cve.now/CVE-2004-0055.md): The print\_attr\_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segment (no CVSS)
- [CVE-2004-0056](https://cve.now/CVE-2004-0056.md): Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP (no CVSS)
- [CVE-2004-0057](https://cve.now/CVE-2004-0057.md): The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a deni (no CVSS)
- [CVE-2004-0058](https://cve.now/CVE-2004-0058.md): Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid\_ant (no CVSS)
- [CVE-2004-0059](https://cve.now/CVE-2004-0059.md): Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary (no CVSS)
- [CVE-2004-0060](https://cve.now/CVE-2004-0060.md): WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash) via a large POST request. (no CVSS)
- [CVE-2004-0061](https://cve.now/CVE-2004-0061.md): WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with a trailing . (no CVSS)
- [CVE-2004-0062](https://cve.now/CVE-2004-0062.md): Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negat (no CVSS)
- [CVE-2004-0064](https://cve.now/CVE-2004-0064.md): The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files wi (no CVSS)
- [CVE-2004-0065](https://cve.now/CVE-2004-0065.md): Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2 (no CVSS)
- [CVE-2004-0066](https://cve.now/CVE-2004-0066.md): phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php, ( (no CVSS)
- [CVE-2004-0067](https://cve.now/CVE-2004-0067.md): Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script (no CVSS)
- [CVE-2004-0069](https://cve.now/CVE-2004-0069.md): Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format strin (no CVSS)
- [CVE-2004-0071](https://cve.now/CVE-2004-0071.md): Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read a (no CVSS)
- [CVE-2004-0072](https://cve.now/CVE-2004-0072.md): Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \\.. (no CVSS)
- [CVE-2004-0073](https://cve.now/CVE-2004-0073.md): PHP remote file inclusion vulnerability in (1) config.php and (2) config\_page.php for EasyDynamicPages 2.0 allows remote attackers to execut (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-01-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.