# CVEs published 2004-10-21

6 CVEs were published on October 21, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0884](https://cve.now/CVE-2004-0884.md): The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL\_PATH environment variable to find all available S (no CVSS)
- [CVE-2004-0891](https://cve.now/CVE-2004-0891.md): Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) (no CVSS)
- [CVE-2004-0918](https://cve.now/CVE-2004-0918.md): The asn\_parse\_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a de (no CVSS)
- [CVE-2004-0957](https://cve.now/CVE-2004-0957.md): Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "\_" (underscore), (no CVSS)
- [CVE-2004-0978](https://cve.now/CVE-2004-0978.md): Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online (no CVSS)
- [CVE-2004-0979](https://cve.now/CVE-2004-0979.md): Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disab (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-10-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.