# CVEs published 2004-04-06

11 CVEs were published on April 6, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0648](https://cve.now/CVE-2003-0648.md): Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code. (no CVSS)
- [CVE-2004-0183](https://cve.now/CVE-2004-0183.md): TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a (no CVSS)
- [CVE-2004-0184](https://cve.now/CVE-2004-0184.md): Integer underflow in the isakmp\_id\_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an I (no CVSS)
- [CVE-2004-0366](https://cve.now/CVE-2004-0366.md): SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements. (no CVSS)
- [CVE-2004-0370](https://cve.now/CVE-2004-0370.md): The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, w (no CVSS)
- [CVE-2004-0371](https://cve.now/CVE-2004-0371.md): Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allow (no CVSS)
- [CVE-2004-0374](https://cve.now/CVE-2004-0374.md): Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information (no CVSS)
- [CVE-2004-0376](https://cve.now/CVE-2004-0376.md): oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value. (no CVSS)
- [CVE-2004-0377](https://cve.now/CVE-2004-0377.md): Buffer overflow in the win32\_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote at (no CVSS)
- [CVE-2004-0380](https://cve.now/CVE-2004-0380.md): The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restr (no CVSS)
- [CVE-2004-0381](https://cve.now/CVE-2004-0381.md): mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-04-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.