# CVEs published 2004-10-20 18 CVEs were published on October 20, 2004: 0 critical, 0 high. Days are UTC. - [CVE-2001-1413](https://cve.now/CVE-2001-1413.md): Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (no CVSS) - [CVE-2004-0805](https://cve.now/CVE-2004-0805.md): Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp (no CVSS) - [CVE-2004-0834](https://cve.now/CVE-2004-0834.md): Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem\_run, (2) pppoa2 (no CVSS) - [CVE-2004-0960](https://cve.now/CVE-2004-0960.md): FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) (no CVSS) - [CVE-2004-0961](https://cve.now/CVE-2004-0961.md): Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Reque (no CVSS) - [CVE-2004-0963](https://cve.now/CVE-2004-0963.md): Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (no CVSS) - [CVE-2004-0964](https://cve.now/CVE-2004-0964.md): Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary co (no CVSS) - [CVE-2004-0966](https://cve.now/CVE-2004-0966.md): The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through (no CVSS) - [CVE-2004-0967](https://cve.now/CVE-2004-0967.md): The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 throu (no CVSS) - [CVE-2004-0968](https://cve.now/CVE-2004-0968.md): The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files. (no CVSS) - [CVE-2004-0969](https://cve.now/CVE-2004-0969.md): The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operati (no CVSS) - [CVE-2004-0970](https://cve.now/CVE-2004-0970.md): The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overw (no CVSS) - [CVE-2004-0971](https://cve.now/CVE-2004-0971.md): The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allow (no CVSS) - [CVE-2004-0972](https://cve.now/CVE-2004-0972.md): The lvmcreate\_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local u (no CVSS) - [CVE-2004-0974](https://cve.now/CVE-2004-0974.md): The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files vi (no CVSS) - [CVE-2004-0975](https://cve.now/CVE-2004-0975.md): The der\_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwri (no CVSS) - [CVE-2004-0976](https://cve.now/CVE-2004-0976.md): Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite fil (no CVSS) - [CVE-2004-0977](https://cve.now/CVE-2004-0977.md): The make\_oidjoins\_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2004-10-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.