# CVEs published 2004-09-28

4 CVEs were published on September 28, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0552](https://cve.now/CVE-2004-0552.md): Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1 (no CVSS)
- [CVE-2004-0828](https://cve.now/CVE-2004-0828.md): The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, (no CVSS)
- [CVE-2004-0832](https://cve.now/CVE-2004-0832.md): The (1) ntlm\_fetch\_string and (2) ntlm\_get\_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attac (no CVSS)
- [CVE-2004-0911](https://cve.now/CVE-2004-0911.md): telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service ( (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.