# CVEs published 2005-01-22

17 CVEs were published on January 22, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1004](https://cve.now/CVE-2004-1004.md): Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. (no CVSS)
- [CVE-2004-1005](https://cve.now/CVE-2004-1005.md): Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. (no CVSS)
- [CVE-2004-1009](https://cve.now/CVE-2004-1009.md): Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. (no CVSS)
- [CVE-2004-1090](https://cve.now/CVE-2004-1090.md): Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header." (no CVSS)
- [CVE-2004-1091](https://cve.now/CVE-2004-1091.md): Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference. (no CVSS)
- [CVE-2004-1092](https://cve.now/CVE-2004-1092.md): Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory. (no CVSS)
- [CVE-2004-1093](https://cve.now/CVE-2004-1093.md): Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory." (no CVSS)
- [CVE-2004-1174](https://cve.now/CVE-2004-1174.md): direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file ha (no CVSS)
- [CVE-2004-1175](https://cve.now/CVE-2004-1175.md): fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell met (no CVSS)
- [CVE-2004-1176](https://cve.now/CVE-2004-1176.md): Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly (no CVSS)
- [CVE-2004-1181](https://cve.now/CVE-2004-1181.md): htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2005-0016](https://cve.now/CVE-2005-0016.md): Buffer overflow in the exported\_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code. (no CVSS)
- [CVE-2005-0020](https://cve.now/CVE-2005-0020.md): Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code. (no CVSS)
- [CVE-2005-0112](https://cve.now/CVE-2005-0112.md): The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1 (no CVSS)
- [CVE-2005-0129](https://cve.now/CVE-2005-0129.md): The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" var (no CVSS)
- [CVE-2005-0130](https://cve.now/CVE-2005-0130.md): Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names (no CVSS)
- [CVE-2005-0131](https://cve.now/CVE-2005-0131.md): The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.