# CVEs published 2004-12-31 24 CVEs were published on December 31, 2004: 0 critical, 0 high. Days are UTC. - [CVE-2004-0452](https://cve.now/CVE-2004-0452.md): Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allo (no CVSS) - [CVE-2004-0567](https://cve.now/CVE-2004-0567.md): The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and (no CVSS) - [CVE-2004-0852](https://cve.now/CVE-2004-0852.md): Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL. (no CVSS) - [CVE-2004-0998](https://cve.now/CVE-2004-0998.md): Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code. (no CVSS) - [CVE-2004-0999](https://cve.now/CVE-2004-0999.md): zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animat (no CVSS) - [CVE-2004-1017](https://cve.now/CVE-2004-1017.md): Multiple "overflows" in the io\_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors. (no CVSS) - [CVE-2004-1043](https://cve.now/CVE-2004-1043.md): Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help (no CVSS) - [CVE-2004-1059](https://cve.now/CVE-2004-1059.md): Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and we (no CVSS) - [CVE-2004-1061](https://cve.now/CVE-2004-1061.md): Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitra (no CVSS) - [CVE-2004-1062](https://cve.now/CVE-2004-1062.md): Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via cert (no CVSS) - [CVE-2004-1139](https://cve.now/CVE-2004-1139.md): Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (applica (no CVSS) - [CVE-2004-1140](https://cve.now/CVE-2004-1140.md): Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space (no CVSS) - [CVE-2004-1141](https://cve.now/CVE-2004-1141.md): The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain (no CVSS) - [CVE-2004-1142](https://cve.now/CVE-2004-1142.md): Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet. (no CVSS) - [CVE-2004-1144](https://cve.now/CVE-2004-1144.md): Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges. (no CVSS) - [CVE-2004-1145](https://cve.now/CVE-2004-1145.md): Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not pro (no CVSS) - [CVE-2004-1146](https://cve.now/CVE-2004-1146.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject (no CVSS) - [CVE-2004-1179](https://cve.now/CVE-2004-1179.md): The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack (no CVSS) - [CVE-2004-1189](https://cve.now/CVE-2004-1189.md): The add\_to\_history function in svr\_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does (no CVSS) - [CVE-2004-1234](https://cve.now/CVE-2004-1234.md): load\_elf\_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpr (no CVSS) - [CVE-2004-1296](https://cve.now/CVE-2004-1296.md): The (1) eqn2graph and (2) pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary (no CVSS) - [CVE-2004-1315](https://cve.now/CVE-2004-1315.md): viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, whic (no CVSS) - [CVE-2004-1316](https://cve.now/CVE-2004-1316.md): Heap-based buffer overflow in MSG\_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a d (no CVSS) - [CVE-2004-1317](https://cve.now/CVE-2004-1317.md): Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbit (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2004-12-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.