# CVEs published 2004-12-01

46 CVEs were published on December 1, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0883](https://cve.now/CVE-2004-0883.md): Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (no CVSS)
- [CVE-2004-0949](https://cve.now/CVE-2004-0949.md): The smb\_recv\_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fr (no CVSS)
- [CVE-2004-0953](https://cve.now/CVE-2004-0953.md): Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (appli (no CVSS)
- [CVE-2004-0996](https://cve.now/CVE-2004-0996.md): main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via (no CVSS)
- [CVE-2004-1008](https://cve.now/CVE-2004-1008.md): Integer signedness error in the ssh2\_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2\_MSG\_DE (no CVSS)
- [CVE-2004-1011](https://cve.now/CVE-2004-1011.md): Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to exec (no CVSS)
- [CVE-2004-1012](https://cve.now/CVE-2004-1012.md): The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary cod (no CVSS)
- [CVE-2004-1013](https://cve.now/CVE-2004-1013.md): The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary cod (no CVSS)
- [CVE-2004-1015](https://cve.now/CVE-2004-1015.md): Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to exec (no CVSS)
- [CVE-2004-1068](https://cve.now/CVE-2004-1068.md): A "missing serialization" error in the unix\_dgram\_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to (no CVSS)
- [CVE-2004-1069](https://cve.now/CVE-2004-1069.md): Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK\_SEQPACKET unix domain (no CVSS)
- [CVE-2004-1070](https://cve.now/CVE-2004-1070.md): The load\_elf\_binary function in the binfmt\_elf loader (binfmt\_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not pro (no CVSS)
- [CVE-2004-1071](https://cve.now/CVE-2004-1071.md): The binfmt\_elf loader (binfmt\_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to th (no CVSS)
- [CVE-2004-1072](https://cve.now/CVE-2004-1072.md): The binfmt\_elf loader (binfmt\_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that i (no CVSS)
- [CVE-2004-1073](https://cve.now/CVE-2004-1073.md): The open\_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to (no CVSS)
- [CVE-2004-1074](https://cve.now/CVE-2004-1074.md): The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel o (no CVSS)
- [CVE-2004-1075](https://cve.now/CVE-2004-1075.md): Cross-site scripting (XSS) vulnerability in standard\_error\_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to injec (no CVSS)
- [CVE-2004-1079](https://cve.now/CVE-2004-1079.md): Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain pri (no CVSS)
- [CVE-2004-1080](https://cve.now/CVE-2004-1080.md): The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to writ (no CVSS)
- [CVE-2004-1094](https://cve.now/CVE-2004-1094.md): Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2004-1095](https://cve.now/CVE-2004-1095.md): Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) re (no CVSS)
- [CVE-2004-1096](https://cve.now/CVE-2004-1096.md): Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus prote (no CVSS)
- [CVE-2004-1097](https://cve.now/CVE-2004-1097.md): Format string vulnerability in the cherokee\_logger\_ncsa\_write\_string function in Cherokee 0.4.17 and earlier, when authenticating via auth\_p (no CVSS)
- [CVE-2004-1098](https://cve.now/CVE-2004-1098.md): MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that cont (no CVSS)
- [CVE-2004-1099](https://cve.now/CVE-2004-1099.md): Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3. (no CVSS)
- [CVE-2004-1100](https://cve.now/CVE-2004-1100.md): Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, all (no CVSS)
- [CVE-2004-1101](https://cve.now/CVE-2004-1101.md): mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak s (no CVSS)
- [CVE-2004-1102](https://cve.now/CVE-2004-1102.md): MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, w (no CVSS)
- [CVE-2004-1103](https://cve.now/CVE-2004-1103.md): MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the d (no CVSS)
- [CVE-2004-1104](https://cve.now/CVE-2004-1104.md): Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a (no CVSS)
- [CVE-2004-1105](https://cve.now/CVE-2004-1105.md): Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could a (no CVSS)
- [CVE-2004-1106](https://cve.now/CVE-2004-1106.md): Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML vi (no CVSS)
- [CVE-2004-1107](https://cve.now/CVE-2004-1107.md): dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2004-1108](https://cve.now/CVE-2004-1108.md): qpkg in Gentoolkit 0.2.0\_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory. (no CVSS)
- [CVE-2004-1109](https://cve.now/CVE-2004-1109.md): The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and (no CVSS)
- [CVE-2004-1110](https://cve.now/CVE-2004-1110.md): The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson t (no CVSS)
- [CVE-2004-1111](https://cve.now/CVE-2004-1111.md): Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp (no CVSS)
- [CVE-2004-1112](https://cve.now/CVE-2004-1112.md): The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating t (no CVSS)
- [CVE-2004-1113](https://cve.now/CVE-2004-1113.md): SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2004-1114](https://cve.now/CVE-2004-1114.md): Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2004-1115](https://cve.now/CVE-2004-1115.md): The init scripts in Search for Extraterrestrial Intelligence (SETI) project 3.08-r3 and earlier execute user-owned programs with root privil (no CVSS)
- [CVE-2004-1116](https://cve.now/CVE-2004-1116.md): The init scripts in Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier execute user-owned programs with root privileges, which al (no CVSS)
- [CVE-2004-1117](https://cve.now/CVE-2004-1117.md): The init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges, which allows local users to gain privileg (no CVSS)
- [CVE-2004-1118](https://cve.now/CVE-2004-1118.md): Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup F (no CVSS)
- [CVE-2004-1119](https://cve.now/CVE-2004-1119.md): Stack-based buffer overflow in IN\_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute ar (no CVSS)
- [CVE-2004-1120](https://cve.now/CVE-2004-1120.md): Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-12-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.