# CVEs published 2004-08-19

8 CVEs were published on August 19, 2004: 0 critical, 1 high. Days are UTC.

- [CVE-2004-0408](https://cve.now/CVE-2004-0408.md): Buffer overflow in the child\_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2004-0457](https://cve.now/CVE-2004-0457.md): The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrit (no CVSS)
- [CVE-2004-0458](https://cve.now/CVE-2004-0458.md): mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null poin (CVSS 7.5)
- [CVE-2004-0689](https://cve.now/CVE-2004-0689.md): KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or (no CVSS)
- [CVE-2004-0755](https://cve.now/CVE-2004-0755.md): The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allo (no CVSS)
- [CVE-2004-0768](https://cve.now/CVE-2004-0768.md): libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2004-0777](https://cve.now/CVE-2004-0777.md): Format string vulnerability in the auth\_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBU (no CVSS)
- [CVE-2004-0794](https://cve.now/CVE-2004-0794.md): Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-08-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.