Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: October 2004

12 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2004-1595
    48Plan

    Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.

    HighCVSS 7.5WeaponizedEPSS 59%

    shixxnote · shixxnoteOct 13, 2004

  • CVE-2004-1602
    29Monitor

    ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attacker

    MediumCVSS 5.0Proof of conceptEPSS 30%

    proftpd · proftpdOct 15, 2004

  • CVE-2004-1638
    49Plan

    Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (2) HELO command.

    HighCVSS 7.5WeaponizedEPSS 62%

    tabs laboratories · mailcarrierOct 16, 2004

  • CVE-2004-0748
    27Monitor

    mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in

    MediumCVSS 5.0No exploitEPSS 24%

    apache · http serverOct 20, 2004

  • CVE-2004-0751
    42Plan

    The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to

    MediumCVSS 5.0Proof of conceptEPSS 72%

    apache · http serverOct 20, 2004

  • CVE-2004-0777
    33Monitor

    Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBU

    HighCVSS 7.5Proof of conceptEPSS 10%

    inter7 · courier-imapOct 20, 2004

  • CVE-2004-0786
    27Monitor

    The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (chi

    MediumCVSS 5.0No exploitEPSS 24%

    apache · http serverOct 20, 2004

  • CVE-2004-0795
    40Plan

    DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gai

    HighCVSS 7.2WeaponizedEPSS 2%

    ibm · db2 universal databaseOct 20, 2004

  • CVE-2004-0798
    49Plan

    Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary co

    HighCVSS 7.5WeaponizedEPSS 62%

    progress · whatsup goldOct 20, 2004

  • CVE-2004-1623
    26Monitor

    The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV f

    MediumCVSS 5.0Proof of conceptEPSS 18%

    microsoft · windows xpOct 22, 2004

  • CVE-2004-1626
    40Plan

    Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR comma

    MediumCVSS 5.0WeaponizedEPSS 67%

    code-crafters · ability serverOct 22, 2004

  • CVE-2004-1627
    34Monitor

    Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a lon

    HighCVSS 7.5Proof of conceptEPSS 14%

    code-crafters · ability serverOct 22, 2004