# CVEs published 2004-07-08

11 CVEs were published on July 8, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0395](https://cve.now/CVE-2004-0395.md): The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows loca (no CVSS)
- [CVE-2004-0448](https://cve.now/CVE-2004-0448.md): Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code vi (no CVSS)
- [CVE-2004-0468](https://cve.now/CVE-2004-0468.md): Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and devi (no CVSS)
- [CVE-2004-0477](https://cve.now/CVE-2004-0477.md): Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts us (no CVSS)
- [CVE-2004-0565](https://cve.now/CVE-2004-0565.md): Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which (no CVSS)
- [CVE-2004-0602](https://cve.now/CVE-2004-0602.md): The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to (no CVSS)
- [CVE-2004-0627](https://cve.now/CVE-2004-0627.md): The check\_scramble\_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scr (no CVSS)
- [CVE-2004-0628](https://cve.now/CVE-2004-0628.md): Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly (no CVSS)
- [CVE-2004-0633](https://cve.now/CVE-2004-0633.md): The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer ov (no CVSS)
- [CVE-2004-0634](https://cve.now/CVE-2004-0634.md): The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a hand (no CVSS)
- [CVE-2004-0635](https://cve.now/CVE-2004-0635.md): The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malforme (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-07-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.