# CVEs published 2005-03-10

24 CVEs were published on March 10, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1090](https://cve.now/CVE-2003-1090.md): Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title. (no CVSS)
- [CVE-2003-1091](https://cve.now/CVE-2003-1091.md): Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (c (no CVSS)
- [CVE-2003-1092](https://cve.now/CVE-2003-1092.md): Unknown vulnerability in the "Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3.41, related to "a me (no CVSS)
- [CVE-2003-1093](https://cve.now/CVE-2003-1093.md): BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password wh (no CVSS)
- [CVE-2003-1094](https://cve.now/CVE-2003-1094.md): BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user, such as in (no CVSS)
- [CVE-2003-1095](https://cve.now/CVE-2003-1095.md): BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication (no CVSS)
- [CVE-2003-1096](https://cve.now/CVE-2003-1096.md): The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it (no CVSS)
- [CVE-2004-1755](https://cve.now/CVE-2004-1755.md): The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to conne (no CVSS)
- [CVE-2004-1756](https://cve.now/CVE-2004-1756.md): BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may (no CVSS)
- [CVE-2004-1757](https://cve.now/CVE-2004-1757.md): BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users (no CVSS)
- [CVE-2004-1758](https://cve.now/CVE-2004-1758.md): BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and passwor (no CVSS)
- [CVE-2004-1759](https://cve.now/CVE-2004-1759.md): Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2004-1760](https://cve.now/CVE-2004-1760.md): The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require au (no CVSS)
- [CVE-2004-1761](https://cve.now/CVE-2004-1761.md): Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color (no CVSS)
- [CVE-2004-1762](https://cve.now/CVE-2004-1762.md): Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV. (no CVSS)
- [CVE-2004-1763](https://cve.now/CVE-2004-1763.md): Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a denial of service (cras (no CVSS)
- [CVE-2004-1764](https://cve.now/CVE-2004-1764.md): Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vecto (no CVSS)
- [CVE-2004-1765](https://cve.now/CVE-2004-1765.md): Off-by-one buffer overflow in ModSecurity (mod\_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to (no CVSS)
- [CVE-2004-1766](https://cve.now/CVE-2004-1766.md): The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices runni (no CVSS)
- [CVE-2004-1767](https://cve.now/CVE-2004-1767.md): The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly in (no CVSS)
- [CVE-2004-1768](https://cve.now/CVE-2004-1768.md): The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote atta (no CVSS)
- [CVE-2004-1769](https://cve.now/CVE-2004-1769.md): The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attack (no CVSS)
- [CVE-2004-1770](https://cve.now/CVE-2004-1770.md): The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in (no CVSS)
- [CVE-2005-0707](https://cve.now/CVE-2005-0707.md): Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows remote authenticated us (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.