# CVEs published 2004-06-03 32 CVEs were published on June 3, 2004: 0 critical, 0 high. Days are UTC. - [CVE-2003-0193](https://cve.now/CVE-2003-0193.md): msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temp (no CVSS) - [CVE-2003-1042](https://cve.now/CVE-2003-1042.md): SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privilege (no CVSS) - [CVE-2003-1043](https://cve.now/CVE-2003-1043.md): SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords p (no CVSS) - [CVE-2003-1044](https://cve.now/CVE-2003-1044.md): editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group th (no CVSS) - [CVE-2003-1045](https://cve.now/CVE-2003-1045.md): votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting page when that user has (no CVSS) - [CVE-2003-1046](https://cve.now/CVE-2003-1046.md): describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows (no CVSS) - [CVE-2004-0134](https://cve.now/CVE-2004-0134.md): cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpo (no CVSS) - [CVE-2004-0175](https://cve.now/CVE-2004-0175.md): Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. (no CVSS) - [CVE-2004-0228](https://cve.now/CVE-2004-0228.md): Integer signedness error in the cpufreq proc handler (cpufreq\_procctl) in Linux kernel 2.6 allows local users to gain privileges. (no CVSS) - [CVE-2004-0412](https://cve.now/CVE-2004-0412.md): Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server. (no CVSS, mailman) - [CVE-2004-0419](https://cve.now/CVE-2004-0419.md): XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the (no CVSS) - [CVE-2004-0435](https://cve.now/CVE-2004-0435.md): Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS\_INV (no CVSS) - [CVE-2004-0476](https://cve.now/CVE-2004-0476.md): Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet (no CVSS) - [CVE-2004-0487](https://cve.now/CVE-2004-0487.md): A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and (no CVSS) - [CVE-2004-0490](https://cve.now/CVE-2004-0490.md): cPanel, when compiling Apache 1.3.29 and PHP with the mod\_phpsuexec option, does not set the --enable-discard-path option, which causes php (no CVSS) - [CVE-2004-0501](https://cve.now/CVE-2004-0501.md): Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTM (no CVSS) - [CVE-2004-0502](https://cve.now/CVE-2004-0502.md): Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original (no CVSS) - [CVE-2004-0503](https://cve.now/CVE-2004-0503.md): Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text (no CVSS) - [CVE-2004-0504](https://cve.now/CVE-2004-0504.md): Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients. (no CVSS) - [CVE-2004-0505](https://cve.now/CVE-2004-0505.md): The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors. (no CVSS) - [CVE-2004-0506](https://cve.now/CVE-2004-0506.md): The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors tha (no CVSS) - [CVE-2004-0507](https://cve.now/CVE-2004-0507.md): Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execut (no CVSS) - [CVE-2004-0513](https://cve.now/CVE-2004-0513.md): Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls." (no CVSS) - [CVE-2004-0514](https://cve.now/CVE-2004-0514.md): Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups." (no CVSS) - [CVE-2004-0515](https://cve.now/CVE-2004-0515.md): Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log files." (no CVSS) - [CVE-2004-0516](https://cve.now/CVE-2004-0516.md): Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-2004-0517. (no CVSS) - [CVE-2004-0517](https://cve.now/CVE-2004-0517.md): Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different vulnerability than C (no CVSS) - [CVE-2004-0518](https://cve.now/CVE-2004-0518.md): Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attac (no CVSS) - [CVE-2004-0519](https://cve.now/CVE-2004-0519.md): Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users (no CVSS) - [CVE-2004-0520](https://cve.now/CVE-2004-0520.md): Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and scri (no CVSS) - [CVE-2004-0521](https://cve.now/CVE-2004-0521.md): SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown im (no CVSS) - [CVE-2004-0523](https://cve.now/CVE-2004-0523.md): Multiple buffer overflows in krb5\_aname\_to\_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2004-06-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.