# CVEs published 2005-01-06 27 CVEs were published on January 6, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2004-1236](https://cve.now/CVE-2004-1236.md): Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers t (no CVSS) - [CVE-2004-1305](https://cve.now/CVE-2004-1305.md): The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote (no CVSS) - [CVE-2004-1312](https://cve.now/CVE-2004-1312.md): A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a (no CVSS) - [CVE-2004-1318](https://cve.now/CVE-2004-1318.md): Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and we (no CVSS) - [CVE-2004-1319](https://cve.now/CVE-2004-1319.md): The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windo (no CVSS) - [CVE-2004-1320](https://cve.now/CVE-2004-1320.md): Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers to gain unauthorized (no CVSS) - [CVE-2004-1321](https://cve.now/CVE-2004-1321.md): The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote atta (no CVSS) - [CVE-2004-1322](https://cve.now/CVE-2004-1322.md): Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote (no CVSS) - [CVE-2004-1323](https://cve.now/CVE-2004-1323.md): Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large si (no CVSS) - [CVE-2004-1324](https://cve.now/CVE-2004-1324.md): The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone (no CVSS) - [CVE-2004-1325](https://cve.now/CVE-2004-1325.md): The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the (no CVSS) - [CVE-2004-1326](https://cve.now/CVE-2004-1326.md): Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter. (no CVSS) - [CVE-2004-1327](https://cve.now/CVE-2004-1327.md): Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that co (no CVSS) - [CVE-2004-1328](https://cve.now/CVE-2004-1328.md): Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges. (no CVSS) - [CVE-2004-1329](https://cve.now/CVE-2004-1329.md): Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag\_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5 (no CVSS) - [CVE-2004-1330](https://cve.now/CVE-2004-1330.md): Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username. (no CVSS) - [CVE-2004-1331](https://cve.now/CVE-2004-1331.md): The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialo (no CVSS) - [CVE-2004-1332](https://cve.now/CVE-2004-1332.md): Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitr (no CVSS) - [CVE-2004-1333](https://cve.now/CVE-2004-1333.md): Integer overflow in the vc\_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (ke (no CVSS) - [CVE-2004-1334](https://cve.now/CVE-2004-1334.md): Integer overflow in the ip\_options\_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel cr (no CVSS) - [CVE-2004-1335](https://cve.now/CVE-2004-1335.md): Memory leak in the ip\_options\_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consump (no CVSS) - [CVE-2004-1336](https://cve.now/CVE-2004-1336.md): The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary (no CVSS) - [CVE-2004-1337](https://cve.now/CVE-2004-1337.md): The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched (no CVSS) - [CVE-2004-1338](https://cve.now/CVE-2004-1338.md): The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLRO (no CVSS) - [CVE-2004-1339](https://cve.now/CVE-2004-1339.md): SQL injection vulnerability in the (1) MDSYS.SDO\_GEOM\_TRIG\_INS1 and (2) MDSYS.SDO\_LRS\_TRIG\_INS default triggers in Oracle 9i and 10g allows (no CVSS) - [CVE-2005-0021](https://cve.now/CVE-2005-0021.md): Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 compone (no CVSS) - [CVE-2005-0022](https://cve.now/CVE-2005-0022.md): Buffer overflow in the spa\_base64\_to\_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth\_sp (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-01-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.