# CVEs published 2004-11-24

11 CVEs were published on November 24, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0810](https://cve.now/CVE-2004-0810.md): Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service (server process crash) via a certain data str (no CVSS)
- [CVE-2004-0947](https://cve.now/CVE-2004-0947.md): Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames. (no CVSS)
- [CVE-2004-0950](https://cve.now/CVE-2004-0950.md): NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via (1) (no CVSS)
- [CVE-2004-1021](https://cve.now/CVE-2004-1021.md): iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allow (no CVSS)
- [CVE-2004-1029](https://cve.now/CVE-2004-1029.md): The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2\_01, 1.4.2\_04, and possibly earlier versions, does not properly rest (no CVSS)
- [CVE-2004-1030](https://cve.now/CVE-2004-1030.md): fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup wit (no CVSS)
- [CVE-2004-1031](https://cve.now/CVE-2004-1031.md): fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary conf (no CVSS)
- [CVE-2004-1032](https://cve.now/CVE-2004-1032.md): fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty file (no CVSS)
- [CVE-2004-1033](https://cve.now/CVE-2004-1033.md): Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restriction (no CVSS)
- [CVE-2004-1053](https://cve.now/CVE-2004-1053.md): Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in a (no CVSS)
- [CVE-2004-1055](https://cve.now/CVE-2004-1055.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web scrip (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-11-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.