# CVEs published 2004-10-28

14 CVEs were published on October 28, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0510](https://cve.now/CVE-2004-0510.md): Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitr (no CVSS)
- [CVE-2004-0511](https://cve.now/CVE-2004-0511.md): Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a (no CVSS)
- [CVE-2004-0512](https://cve.now/CVE-2004-0512.md): Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a (no CVSS)
- [CVE-2004-0814](https://cve.now/CVE-2004-0814.md): Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel da (no CVSS)
- [CVE-2004-0921](https://cve.now/CVE-2004-0921.md): AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" v (no CVSS)
- [CVE-2004-0922](https://cve.now/CVE-2004-0922.md): AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a wr (no CVSS)
- [CVE-2004-0924](https://cve.now/CVE-2004-0924.md): NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has (no CVSS)
- [CVE-2004-0925](https://cve.now/CVE-2004-0925.md): Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, wh (no CVSS)
- [CVE-2004-0926](https://cve.now/CVE-2004-0926.md): Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a cer (no CVSS)
- [CVE-2004-0927](https://cve.now/CVE-2004-0927.md): ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to (no CVSS)
- [CVE-2004-0962](https://cve.now/CVE-2004-0962.md): Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application (no CVSS)
- [CVE-2004-0988](https://cve.now/CVE-2004-0988.md): Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (mem (no CVSS)
- [CVE-2004-0989](https://cve.now/CVE-2004-0989.md): Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2004-0990](https://cve.now/CVE-2004-0990.md): Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of ser (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-10-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.