# CVEs published 2010-02-04

17 CVEs were published on February 4, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0555](https://cve.now/CVE-2010-0555.md): Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows (no CVSS)
- [CVE-2010-0255](https://cve.now/CVE-2010-0255.md): Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows (no CVSS)
- [CVE-2010-0548](https://cve.now/CVE-2010-0548.md): Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 56 (no CVSS)
- [CVE-2010-0549](https://cve.now/CVE-2010-0549.md): Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, an (no CVSS)
- [CVE-2010-0550](https://cve.now/CVE-2010-0550.md): admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated user (no CVSS)
- [CVE-2010-0551](https://cve.now/CVE-2010-0551.md): HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication headers of other use (no CVSS)
- [CVE-2010-0552](https://cve.now/CVE-2010-0552.md): Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary c (no CVSS)
- [CVE-2010-0553](https://cve.now/CVE-2010-0553.md): Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service (application crash) and possibly execute a (no CVSS)
- [CVE-2010-0554](https://cve.now/CVE-2010-0554.md): The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote (no CVSS)
- [CVE-2009-2750](https://cve.now/CVE-2009-2750.md): IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended configuration properties, which allows remo (no CVSS)
- [CVE-2009-4016](https://cve.now/CVE-2009-4016.md): Integer underflow in the clean\_string function in irc\_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oft (no CVSS)
- [CVE-2010-0300](https://cve.now/CVE-2010-0300.md): cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a H (no CVSS)
- [CVE-2010-0301](https://cve.now/CVE-2010-0301.md): main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a u (no CVSS)
- [CVE-2010-0303](https://cve.now/CVE-2010-0303.md): mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a denial of service (da (no CVSS)
- [CVE-2010-0441](https://cve.now/CVE-2010-0441.md): Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, (no CVSS)
- [CVE-2010-0443](https://cve.now/CVE-2010-0443.md): Unspecified vulnerability in Record Management Services (RMS) before VMS83A\_RMS-V1100 for HP OpenVMS on the Alpha platform allows local user (no CVSS)
- [CVE-2010-0547](https://cve.now/CVE-2010-0547.md): client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings ar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.