# CVEs published 2004-05-05

14 CVEs were published on May 5, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0226](https://cve.now/CVE-2004-0226.md): Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code (no CVSS)
- [CVE-2004-0229](https://cve.now/CVE-2004-0229.md): The framebuffer driver in Linux kernel 2.6.x does not properly use the fb\_copy\_cmap function, with unknown impact. (no CVSS)
- [CVE-2004-0230](https://cve.now/CVE-2004-0230.md): TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connectio (no CVSS)
- [CVE-2004-0231](https://cve.now/CVE-2004-0231.md): Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory cre (no CVSS)
- [CVE-2004-0232](https://cve.now/CVE-2004-0232.md): Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute a (no CVSS)
- [CVE-2004-0233](https://cve.now/CVE-2004-0233.md): Utempter allows device names that contain .. (no CVSS)
- [CVE-2004-0234](https://cve.now/CVE-2004-0234.md): Multiple stack-based buffer overflows in the get\_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewa (no CVSS)
- [CVE-2004-0235](https://cve.now/CVE-2004-0235.md): Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive (no CVSS)
- [CVE-2004-0375](https://cve.now/CVE-2004-0375.md): SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and (no CVSS)
- [CVE-2004-0394](https://cve.now/CVE-2004-0394.md): A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of (no CVSS)
- [CVE-2004-0421](https://cve.now/CVE-2004-0421.md): The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG (no CVSS)
- [CVE-2004-0425](https://cve.now/CVE-2004-0425.md): Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie. (no CVSS)
- [CVE-2004-0432](https://cve.now/CVE-2004-0432.md): ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to byp (no CVSS)
- [CVE-2004-0433](https://cve.now/CVE-2004-0433.md): Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) befor (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-05-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.