# CVEs published 2010-02-03

12 CVEs were published on February 3, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3387](https://cve.now/CVE-2009-3387.md): Bugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved throughout the process of moving a bug to… (no CVSS)
- [CVE-2009-3989](https://cve.now/CVE-2009-3989.md): Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that… (no CVSS)
- [CVE-2010-0038](https://cve.now/CVE-2010-0038.md): Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers… (no CVSS)
- [CVE-2010-0295](https://cve.now/CVE-2010-0295.md): lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to… (no CVSS)
- [CVE-2010-0305](https://cve.now/CVE-2010-0305.md): ejabberd\_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s… (no CVSS)
- [CVE-2010-0496](https://cve.now/CVE-2010-0496.md): FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2009-4184](https://cve.now/CVE-2009-4184.md): Unspecified vulnerability in HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and HP-UX B.11.31 (11i v3)… (no CVSS)
- [CVE-2010-0185](https://cve.now/CVE-2010-0185.md): The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service… (no CVSS)
- [CVE-2010-0304](https://cve.now/CVE-2010-0304.md): Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to… (no CVSS)
- [CVE-2010-0308](https://cve.now/CVE-2010-0308.md): lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2010-0440](https://cve.now/CVE-2010-0440.md): Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used… (no CVSS)
- [CVE-2010-0453](https://cve.now/CVE-2010-0453.md): The ucode\_ioctl function in intel/io/ucode\_drv.c in Sun Solaris 10 and OpenSolaris snv\_69 through snv\_133, when running on x86… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.