# CVEs published 2004-06-08

13 CVEs were published on June 8, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0450](https://cve.now/CVE-2004-0450.md): Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary (no CVSS)
- [CVE-2004-0522](https://cve.now/CVE-2004-0522.md): Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges. (no CVSS)
- [CVE-2004-0524](https://cve.now/CVE-2004-0524.md): Buffer overflow in the chpasswd command in the Change\_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root pri (no CVSS)
- [CVE-2004-0525](https://cve.now/CVE-2004-0525.md): HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing (no CVSS)
- [CVE-2004-0526](https://cve.now/CVE-2004-0526.md): Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with mo (no CVSS)
- [CVE-2004-0527](https://cve.now/CVE-2004-0527.md): KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values (no CVSS)
- [CVE-2004-0528](https://cve.now/CVE-2004-0528.md): Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that p (no CVSS)
- [CVE-2004-0529](https://cve.now/CVE-2004-0529.md): The modified suexec program in cPanel, when configured for mod\_php and compiled for Apache 1.3.31 and earlier without mod\_phpsuexec, allows (no CVSS)
- [CVE-2004-0530](https://cve.now/CVE-2004-0530.md): The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local u (no CVSS)
- [CVE-2004-0535](https://cve.now/CVE-2004-0535.md): The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read p (no CVSS)
- [CVE-2004-0536](https://cve.now/CVE-2004-0536.md): Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users t (no CVSS)
- [CVE-2004-0537](https://cve.now/CVE-2004-0537.md): Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web (no CVSS)
- [CVE-2004-0540](https://cve.now/CVE-2004-0540.md): Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent use (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.