CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 11450 | CVE-2005-0244 | Candidate | PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command. | Assigned (20050208) | None (candidate not yet proposed) | View | |
| 11449 | CVE-2005-0243 | Candidate | Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions. | Assigned (20050208) | None (candidate not yet proposed) | View | |
| 11448 | CVE-2005-0242 | Candidate | The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions. | Assigned (20050208) | None (candidate not yet proposed) | View | |
| 11447 | CVE-2005-0241 | Candidate | The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size. | Assigned (20050208) | None (candidate not yet proposed) | View | |
| 11446 | CVE-2005-0240 | Candidate | Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message. | Assigned (20050207) | None (candidate not yet proposed) | View |
Page 18654 of 20943, showing 5 records out of 104715 total, starting on record 93266, ending on 93270
