Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: January 2005

53 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2004-0568
    51Plan

    HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a v

    CriticalCVSS 10.0No exploitEPSS 35%

    microsoft · windows 2000Jan 10, 2005

  • CVE-2004-0571
    49Plan

    Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary

    CriticalCVSS 10.0No exploitEPSS 30%

    microsoft · windows 2000Jan 10, 2005

  • CVE-2004-0899
    42Plan

    The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly valida

    MediumCVSS 5.0No exploitEPSS 72%

    microsoft · windows ntJan 10, 2005

  • CVE-2004-0900
    48Plan

    The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain mes

    CriticalCVSS 10.0No exploitEPSS 26%

    microsoft · windows ntJan 10, 2005

  • CVE-2004-0901
    50Plan

    Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows r

    CriticalCVSS 10.0No exploitEPSS 31%

    microsoft · windows 2000Jan 10, 2005

  • CVE-2004-0946
    43Plan

    rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads

    CriticalCVSS 10.0No exploitEPSS 11%

    nfs · nfs-utilsJan 10, 2005

  • CVE-2004-0953
    43Plan

    Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (appli

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    jabber software foundation · jabber serverJan 10, 2005

  • CVE-2004-0993
    43Plan

    Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary

    CriticalCVSS 10.0No exploitEPSS 10%

    hp · sockdJan 10, 2005

  • CVE-2004-1018
    45Plan

    Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execut

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    php · phpJan 10, 2005

  • CVE-2004-1065
    43Plan

    Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary cod

    CriticalCVSS 10.0No exploitEPSS 10%

    php · phpJan 10, 2005

  • CVE-2004-1080
    64This week

    The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to writ

    CriticalCVSS 10.0WeaponizedEPSS 79%

    microsoft · windows 2000Jan 10, 2005

  • CVE-2004-1096
    36Monitor

    Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus prote

    HighCVSS 7.5Proof of conceptEPSS 18%

    broadcom · brightstor arcserve backupJan 10, 2005

  • CVE-2004-1099
    43Plan

    Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.

    CriticalCVSS 10.0No exploitEPSS 10%

    cisco · secure access control serverJan 10, 2005

  • CVE-2004-1119
    45Plan

    Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute ar

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    nullsoft · winampJan 10, 2005

  • CVE-2004-1120
    44Plan

    Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    prozilla · prozilla download acceleratorJan 10, 2005

  • CVE-2004-1127
    44Plan

    Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectA

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    open dc hub · direct connect peer-to-peer clientJan 10, 2005

  • CVE-2004-1134
    62This week

    Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary

    CriticalCVSS 10.0WeaponizedEPSS 72%

    microsoft · w3who.dllJan 10, 2005

  • CVE-2004-1135
    40Plan

    Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1)

    MediumCVSS 5.0WeaponizedEPSS 49%

    ipswitch · ws ftp serverJan 10, 2005

  • CVE-2004-1137
    46Plan

    Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers t

    CriticalCVSS 10.0Proof of conceptEPSS 20%

    linux · linux kernelJan 10, 2005

  • CVE-2004-1147
    43Plan

    phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary c

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    phpmyadmin · phpmyadminJan 10, 2005

  • CVE-2004-1154
    44Plan

    Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of serv

    CriticalCVSS 10.0No exploitEPSS 13%

    samba · sambaJan 10, 2005

  • CVE-2004-1170
    45Plan

    a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    gnu · a2psJan 10, 2005

  • CVE-2004-1172
    65This week

    Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, a

    CriticalCVSS 10.0WeaponizedEPSS 81%

    symantec veritas · backup execJan 10, 2005

  • CVE-2004-1192
    44Plan

    Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via for

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    citadel · uxJan 10, 2005

  • CVE-2004-1211
    62This week

    Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application

    CriticalCVSS 10.0WeaponizedEPSS 72%

    david harris · mercuryJan 10, 2005

  • CVE-2004-1254
    43Plan

    WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long f

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    rarlab · winrarJan 10, 2005

  • CVE-2004-1256
    43Plan

    Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute ar

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    abcmidi · abcmidiJan 10, 2005

  • CVE-2004-1260
    43Plan

    Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abctab2ps 1.6.3 allow re

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    abctab2ps · abctab2psJan 10, 2005

  • CVE-2004-1284
    44Plan

    Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafte

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    mpg123 · mpg123Jan 10, 2005

  • CVE-2004-1286
    44Plan

    Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to ex

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    napshare · napshareJan 10, 2005

  • CVE-2004-1287
    45Plan

    Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    nasm · netwide assemblerJan 10, 2005

  • CVE-2004-1288
    43Plan

    Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary code via a crafted SXW

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    siag · o3readJan 10, 2005

  • CVE-2004-1289
    44Plan

    Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remo

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    pcal · pcalJan 10, 2005

  • CVE-2004-1292
    45Plan

    Buffer overflow in the parse_emelody function in parse_emelody.c for ringtonetools 2.22 allows remote attackers to execute arbitrary code vi

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    michael kohn · ringtonetoolsJan 10, 2005

  • CVE-2004-1293
    44Plan

    Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a craft

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    rtf2latex2e · rtf2latex2eJan 10, 2005

  • CVE-2004-1299
    44Plan

    Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    vilistextum · vilistextumJan 10, 2005

  • CVE-2004-1304
    43Plan

    Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    file · fileJan 10, 2005

  • CVE-2004-1308
    44Plan

    Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a

    CriticalCVSS 10.0No exploitEPSS 14%

    libtiff · libtiffJan 10, 2005

  • CVE-2004-0897
    53Plan

    The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attack

    CriticalCVSS 10.0No exploitEPSS 42%

    microsoft · windows 2003 serverJan 11, 2005

  • CVE-2005-0097
    23Monitor

    The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3

    MediumCVSS 5.0No exploitEPSS 10%

    squid · squidJan 11, 2005

  • CVE-2005-0095
    41Plan

    The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WC

    MediumCVSS 5.0No exploitEPSS 68%

    squid · squidJan 15, 2005

  • CVE-2005-0116
    52Plan

    AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir

    HighCVSS 7.5WeaponizedEPSS 74%

    awstats · awstatsJan 18, 2005

  • CVE-2005-0566
    35Monitor

    Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command.

    HighCVSS 7.5Proof of conceptEPSS 15%

    kmint21 software · golden ftp serverJan 22, 2005

  • CVE-2005-0308
    51Plan

    Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or

    HighCVSS 7.5WeaponizedEPSS 68%

    ursoftware · w32dasmJan 24, 2005

  • CVE-2004-0882
    44Plan

    Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a

    CriticalCVSS 10.0No exploitEPSS 13%

    samba · sambaJan 27, 2005

  • CVE-2004-0892
    35Monitor

    Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Pre

    HighCVSS 7.5No exploitEPSS 17%

    microsoft · isa serverJan 27, 2005

  • CVE-2004-0902
    43Plan

    Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow r

    CriticalCVSS 10.0No exploitEPSS 10%

    mozilla · mozillaJan 27, 2005

  • CVE-2004-0918
    25Monitor

    The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a de

    MediumCVSS 5.0No exploitEPSS 15%

    squid · squidJan 27, 2005

  • CVE-2004-0932
    49Plan

    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attac

    HighCVSS 7.5Proof of conceptEPSS 63%

    ca · etrust antivirusJan 27, 2005

  • CVE-2004-0933
    36Monitor

    Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure

    HighCVSS 7.5Proof of conceptEPSS 20%

    ca · etrust antivirusJan 27, 2005

  • CVE-2004-0934
    34Monitor

    Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to

    HighCVSS 7.5Proof of conceptEPSS 14%

    ca · etrust antivirusJan 27, 2005

  • CVE-2004-0935
    35Monitor

    Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both lo

    HighCVSS 7.5Proof of conceptEPSS 15%

    archive zip · archive zipJan 27, 2005

  • CVE-2004-0936
    34Monitor

    RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, w

    HighCVSS 7.5Proof of conceptEPSS 14%

    ca · etrust antivirusJan 27, 2005