# CVEs published 2004-09-24

37 CVEs were published on September 24, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1014](https://cve.now/CVE-2003-1014.md): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use mu (no CVSS)
- [CVE-2003-1015](https://cve.now/CVE-2003-1015.md): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use wh (no CVSS)
- [CVE-2003-1016](https://cve.now/CVE-2003-1016.md): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use ma (no CVSS)
- [CVE-2004-0051](https://cve.now/CVE-2004-0051.md): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use no (no CVSS)
- [CVE-2004-0052](https://cve.now/CVE-2004-0052.md): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use no (no CVSS)
- [CVE-2004-0053](https://cve.now/CVE-2004-0053.md): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fi (no CVSS)
- [CVE-2004-0161](https://cve.now/CVE-2004-0161.md): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RF (no CVSS)
- [CVE-2004-0162](https://cve.now/CVE-2004-0162.md): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that u (no CVSS)
- [CVE-2004-0559](https://cve.now/CVE-2004-0559.md): The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on th (no CVSS)
- [CVE-2004-0688](https://cve.now/CVE-2004-0688.md): Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, (no CVSS)
- [CVE-2004-0750](https://cve.now/CVE-2004-0750.md): Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and (no CVSS)
- [CVE-2004-0787](https://cve.now/CVE-2004-0787.md): Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attacke (no CVSS)
- [CVE-2004-0801](https://cve.now/CVE-2004-0801.md): Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitra (no CVSS)
- [CVE-2004-0802](https://cve.now/CVE-2004-0802.md): Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image (no CVSS)
- [CVE-2004-0811](https://cve.now/CVE-2004-0811.md): Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to rest (no CVSS)
- [CVE-2004-0813](https://cve.now/CVE-2004-0813.md): Unknown vulnerability in the SG\_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and (no CVSS)
- [CVE-2004-0821](https://cve.now/CVE-2004-0821.md): The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain pri (no CVSS)
- [CVE-2004-0822](https://cve.now/CVE-2004-0822.md): Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to exe (no CVSS)
- [CVE-2004-0825](https://cve.now/CVE-2004-0825.md): QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application d (no CVSS)
- [CVE-2004-0827](https://cve.now/CVE-2004-0827.md): Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a de (no CVSS)
- [CVE-2004-0830](https://cve.now/CVE-2004-0830.md): The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 a (no CVSS)
- [CVE-2004-0831](https://cve.now/CVE-2004-0831.md): McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the Sys (no CVSS)
- [CVE-2004-0850](https://cve.now/CVE-2004-0850.md): Star before 1.5\_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain p (no CVSS)
- [CVE-2004-0867](https://cve.now/CVE-2004-0867.md): Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c (no CVSS)
- [CVE-2004-0873](https://cve.now/CVE-2004-0873.md): Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program. (no CVSS)
- [CVE-2004-0875](https://cve.now/CVE-2004-0875.md): Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert (no CVSS)
- [CVE-2004-0880](https://cve.now/CVE-2004-0880.md): getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file. (no CVSS)
- [CVE-2004-0881](https://cve.now/CVE-2004-0881.md): getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via (no CVSS)
- [CVE-2004-0902](https://cve.now/CVE-2004-0902.md): Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow r (no CVSS)
- [CVE-2004-0903](https://cve.now/CVE-2004-0903.md): Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7. (no CVSS)
- [CVE-2004-0904](https://cve.now/CVE-2004-0904.md): Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0. (no CVSS)
- [CVE-2004-0905](https://cve.now/CVE-2004-0905.md): Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain (no CVSS)
- [CVE-2004-0906](https://cve.now/CVE-2004-0906.md): The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permis (no CVSS)
- [CVE-2004-0907](https://cve.now/CVE-2004-0907.md): The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create (no CVSS)
- [CVE-2004-0908](https://cve.now/CVE-2004-0908.md): Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and wr (no CVSS)
- [CVE-2004-0909](https://cve.now/CVE-2004-0909.md): Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into (no CVSS)
- [CVE-2004-0687](https://cve.now/CVE-2004-0687.md): Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c fo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-09-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.