# CVEs published 2004-04-16

30 CVEs were published on April 16, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2002-0385](https://cve.now/CVE-2002-0385.md): Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' (no CVSS)
- [CVE-2003-0533](https://cve.now/CVE-2003-0533.md): Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (L (no CVSS)
- [CVE-2003-0663](https://cve.now/CVE-2003-0663.md): Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allows remote attackers t (no CVSS)
- [CVE-2003-0719](https://cve.now/CVE-2003-0719.md): Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Win (no CVSS)
- [CVE-2003-0806](https://cve.now/CVE-2003-0806.md): Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of (no CVSS)
- [CVE-2003-0807](https://cve.now/CVE-2003-0807.md): Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal (no CVSS)
- [CVE-2003-0906](https://cve.now/CVE-2003-0906.md): Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6 (no CVSS)
- [CVE-2003-0907](https://cve.now/CVE-2003-0907.md): Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2003-0908](https://cve.now/CVE-2003-0908.md): The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary co (no CVSS)
- [CVE-2003-0909](https://cve.now/CVE-2003-0909.md): Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe (no CVSS)
- [CVE-2003-0910](https://cve.now/CVE-2003-0910.md): The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows loc (no CVSS)
- [CVE-2004-0109](https://cve.now/CVE-2004-0109.md): Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to ove (no CVSS)
- [CVE-2004-0116](https://cve.now/CVE-2004-0116.md): An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers t (no CVSS)
- [CVE-2004-0117](https://cve.now/CVE-2004-0117.md): Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote at (no CVSS)
- [CVE-2004-0118](https://cve.now/CVE-2004-0118.md): The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, w (no CVSS)
- [CVE-2004-0119](https://cve.now/CVE-2004-0119.md): The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to ca (no CVSS)
- [CVE-2004-0120](https://cve.now/CVE-2004-0120.md): The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to c (no CVSS)
- [CVE-2004-0123](https://cve.now/CVE-2004-0123.md): Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote a (no CVSS)
- [CVE-2004-0124](https://cve.now/CVE-2004-0124.md): The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via a (no CVSS)
- [CVE-2004-0155](https://cve.now/CVE-2004-0155.md): The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature (no CVSS)
- [CVE-2004-0177](https://cve.now/CVE-2004-0177.md): The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which (no CVSS)
- [CVE-2004-0178](https://cve.now/CVE-2004-0178.md): The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certa (no CVSS)
- [CVE-2004-0179](https://cve.now/CVE-2004-0179.md): Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversio (no CVSS)
- [CVE-2004-0180](https://cve.now/CVE-2004-0180.md): The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute (no CVSS)
- [CVE-2004-0197](https://cve.now/CVE-2004-0197.md): Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database quer (no CVSS)
- [CVE-2004-0385](https://cve.now/CVE-2004-0385.md): Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers (no CVSS)
- [CVE-2004-0387](https://cve.now/CVE-2004-0387.md): Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterpris (no CVSS)
- [CVE-2004-0388](https://cve.now/CVE-2004-0388.md): The mysqld\_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2004-0391](https://cve.now/CVE-2004-0391.md): Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and (no CVSS)
- [CVE-2004-0403](https://cve.now/CVE-2004-0403.md): Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length f (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.