CVEs published September 24, 2004
37 CVEs were published on September 24, 2004: 0 critical, 0 high.
- Published
- 37
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 37
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 37
- CVE-2003-1014Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use mu
- CVE-2003-1015Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use wh
- CVE-2003-1016Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use ma
- CVE-2004-0051Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use no
- CVE-2004-0052Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use no
- CVE-2004-0053Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fi
- CVE-2004-0161Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RF
- CVE-2004-0162Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that u
- CVE-2004-0559The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on th
- CVE-2004-0688Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels,
- CVE-2004-0750Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and
- CVE-2004-0787Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attacke
- CVE-2004-0801Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitra
- CVE-2004-0802Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image
- CVE-2004-0811Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to rest
- CVE-2004-0813Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and
- CVE-2004-0821The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain pri
- CVE-2004-0822Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to exe
- CVE-2004-0825QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application d
- CVE-2004-0827Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a de
- CVE-2004-0830The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 a
- CVE-2004-0831McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the Sys
- CVE-2004-0850Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain p
- CVE-2004-0867Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c
- CVE-2004-0873Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.
- CVE-2004-0875Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert
- CVE-2004-0880getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.
- CVE-2004-0881getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via
- CVE-2004-0902Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow r
- CVE-2004-0903Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.
- CVE-2004-0904Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.
- CVE-2004-0905Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain
- CVE-2004-0906The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permis
- CVE-2004-0907The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create
- CVE-2004-0908Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and wr
- CVE-2004-0909Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into
- CVE-2004-0687Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c fo