# CVEs published 2004-06-30

31 CVEs were published on June 30, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0393](https://cve.now/CVE-2004-0393.md): Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format s (no CVSS)
- [CVE-2004-0451](https://cve.now/CVE-2004-0451.md): Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows re (no CVSS)
- [CVE-2004-0454](https://cve.now/CVE-2004-0454.md): Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code. (no CVSS)
- [CVE-2004-0455](https://cve.now/CVE-2004-0455.md): Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql. (no CVSS)
- [CVE-2004-0480](https://cve.now/CVE-2004-0480.md): Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that us (no CVSS)
- [CVE-2004-0493](https://cve.now/CVE-2004-0493.md): The ap\_get\_mime\_headers\_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and p (no CVSS)
- [CVE-2004-0576](https://cve.now/CVE-2004-0576.md): The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2004-0590](https://cve.now/CVE-2004-0590.md): FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and str (no CVSS)
- [CVE-2004-0603](https://cve.now/CVE-2004-0603.md): gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could (no CVSS)
- [CVE-2004-0604](https://cve.now/CVE-2004-0604.md): The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an (no CVSS)
- [CVE-2004-0605](https://cve.now/CVE-2004-0605.md): Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier d (no CVSS)
- [CVE-2004-0606](https://cve.now/CVE-2004-0606.md): Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitra (no CVSS)
- [CVE-2004-0607](https://cve.now/CVE-2004-0607.md): The eay\_check\_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remo (no CVSS)
- [CVE-2004-0608](https://cve.now/CVE-2004-0608.md): The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 (no CVSS)
- [CVE-2004-0609](https://cve.now/CVE-2004-0609.md): rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine th (no CVSS)
- [CVE-2004-0610](https://cve.now/CVE-2004-0610.md): The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusa (no CVSS)
- [CVE-2004-0611](https://cve.now/CVE-2004-0611.md): Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large (no CVSS)
- [CVE-2004-0612](https://cve.now/CVE-2004-0612.md): The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote at (no CVSS)
- [CVE-2004-0613](https://cve.now/CVE-2004-0613.md): osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP (no CVSS)
- [CVE-2004-0614](https://cve.now/CVE-2004-0614.md): osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload (no CVSS)
- [CVE-2004-0615](https://cve.now/CVE-2004-0615.md): Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2 (no CVSS)
- [CVE-2004-0616](https://cve.now/CVE-2004-0616.md): The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive informa (no CVSS)
- [CVE-2004-0617](https://cve.now/CVE-2004-0617.md): Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL paramet (no CVSS)
- [CVE-2004-0618](https://cve.now/CVE-2004-0618.md): FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memo (no CVSS)
- [CVE-2004-0619](https://cve.now/CVE-2004-0619.md): Integer overflow in the ubsec\_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (cr (no CVSS)
- [CVE-2004-0620](https://cve.now/CVE-2004-0620.md): Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbit (no CVSS)
- [CVE-2004-0621](https://cve.now/CVE-2004-0621.md): admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list\_user operation with the ulevel parameter se (no CVSS)
- [CVE-2004-0622](https://cve.now/CVE-2004-0622.md): Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or (no CVSS)
- [CVE-2004-0623](https://cve.now/CVE-2004-0623.md): Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in (no CVSS)
- [CVE-2004-0624](https://cve.now/CVE-2004-0624.md): PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic\_links5) allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2004-0625](https://cve.now/CVE-2004-0625.md): SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-06-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.