# CVEs published 2004-06-23

17 CVEs were published on June 23, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0125](https://cve.now/CVE-2004-0125.md): The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-j (no CVSS)
- [CVE-2004-0135](https://cve.now/CVE-2004-0135.md): The syssgi SGI\_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memo (no CVSS)
- [CVE-2004-0136](https://cve.now/CVE-2004-0136.md): The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a "corrupted (no CVSS)
- [CVE-2004-0137](https://cve.now/CVE-2004-0137.md): Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of " (no CVSS)
- [CVE-2004-0413](https://cve.now/CVE-2004-0413.md): libsvn\_ra\_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allow (no CVSS)
- [CVE-2004-0492](https://cve.now/CVE-2004-0492.md): Heap-based buffer overflow in proxy\_util.c for mod\_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (pr (no CVSS)
- [CVE-2004-0495](https://cve.now/CVE-2004-0495.md): Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the S (no CVSS)
- [CVE-2004-0579](https://cve.now/CVE-2004-0579.md): Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root. (no CVSS)
- [CVE-2004-0580](https://cve.now/CVE-2004-0580.md): DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used (no CVSS)
- [CVE-2004-0581](https://cve.now/CVE-2004-0581.md): ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlin (no CVSS)
- [CVE-2004-0582](https://cve.now/CVE-2004-0582.md): Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration informati (no CVSS)
- [CVE-2004-0583](https://cve.now/CVE-2004-0583.md): The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote at (no CVSS)
- [CVE-2004-0584](https://cve.now/CVE-2004-0584.md): Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which allows remote attacke (no CVSS)
- [CVE-2004-0586](https://cve.now/CVE-2004-0586.md): acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Download Acti (no CVSS)
- [CVE-2004-0587](https://cve.now/CVE-2004-0587.md): Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service. (no CVSS)
- [CVE-2004-0588](https://cve.now/CVE-2004-0588.md): Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and scrip (no CVSS)
- [CVE-2004-0589](https://cve.now/CVE-2004-0589.md): Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-06-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.