# CVEs published 2005-05-04

16 CVEs were published on May 4, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1307](https://cve.now/CVE-2004-1307.md): Integer overflow in the TIFFFetchStripThing function in tif\_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2005-0594](https://cve.now/CVE-2005-0594.md): Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code. (no CVSS)
- [CVE-2005-1194](https://cve.now/CVE-2005-1194.md): Stack-based buffer overflow in the ieee\_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted (no CVSS)
- [CVE-2005-1330](https://cve.now/CVE-2005-1330.md): AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the (no CVSS)
- [CVE-2005-1331](https://cve.now/CVE-2005-1331.md): The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is di (no CVSS)
- [CVE-2005-1332](https://cve.now/CVE-2005-1332.md): Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access (no CVSS)
- [CVE-2005-1333](https://cve.now/CVE-2005-1333.md): Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to re (no CVSS)
- [CVE-2005-1335](https://cve.now/CVE-2005-1335.md): Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external h (no CVSS)
- [CVE-2005-1336](https://cve.now/CVE-2005-1336.md): Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable (no CVSS)
- [CVE-2005-1337](https://cve.now/CVE-2005-1337.md): Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive priv (no CVSS)
- [CVE-2005-1338](https://cve.now/CVE-2005-1338.md): Mac OS X 10.3.9, when using an LDAP server that does not use ldap\_extended\_operation, may store initial LDAP passwords for new accounts in p (no CVSS)
- [CVE-2005-1339](https://cve.now/CVE-2005-1339.md): lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name. (no CVSS)
- [CVE-2005-1340](https://cve.now/CVE-2005-1340.md): The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use (no CVSS)
- [CVE-2005-1341](https://cve.now/CVE-2005-1341.md): Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences. (no CVSS)
- [CVE-2005-1342](https://cve.now/CVE-2005-1342.md): The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote atta (no CVSS)
- [CVE-2005-1343](https://cve.now/CVE-2005-1343.md): Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i ( (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-05-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.