# CVEs published 2004-03-23

5 CVEs were published on March 23, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1040](https://cve.now/CVE-2003-1040.md): kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sen (no CVSS)
- [CVE-2004-0151](https://cve.now/CVE-2004-0151.md): Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands. (no CVSS)
- [CVE-2004-0362](https://cve.now/CVE-2004-0362.md): Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various Re (no CVSS)
- [CVE-2004-0363](https://cve.now/CVE-2004-0363.md): Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Securit (no CVSS)
- [CVE-2004-0364](https://cve.now/CVE-2004-0364.md): The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-03-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.