# CVEs published 2004-12-05

8 CVEs were published on December 5, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0956](https://cve.now/CVE-2004-0956.md): MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening doubl (no CVSS)
- [CVE-2004-0987](https://cve.now/CVE-2004-0987.md): Buffer overflow in the process\_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2004-1066](https://cve.now/CVE-2004-1066.md): The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a p (no CVSS)
- [CVE-2004-1123](https://cve.now/CVE-2004-1123.md): Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESC (no CVSS)
- [CVE-2004-1127](https://cve.now/CVE-2004-1127.md): Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectA (no CVSS)
- [CVE-2004-1128](https://cve.now/CVE-2004-1128.md): Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename. (no CVSS)
- [CVE-2004-1129](https://cve.now/CVE-2004-1129.md): SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allo (no CVSS)
- [CVE-2004-1130](https://cve.now/CVE-2004-1130.md): Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.