# CVEs published 2009-01-07

15 CVEs were published on January 7, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5866](https://cve.now/CVE-2008-5866.md): The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read/write community, which makes it easier for re (no CVSS)
- [CVE-2008-5867](https://cve.now/CVE-2008-5867.md): Directory traversal vulnerability in Yerba SACphp 6.3 allows remote attackers to read arbitrary files, and possibly have other impact, via d (no CVSS)
- [CVE-2009-0069](https://cve.now/CVE-2009-0069.md): Unspecified vulnerability in the nfs4rename\_persistent\_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun Solaris 10 and OpenS (no CVSS)
- [CVE-2009-0065](https://cve.now/CVE-2009-0065.md): Buffer overflow in net/sctp/sm\_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6. (no CVSS)
- [CVE-2009-0066](https://cve.now/CVE-2009-0066.md): Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended load (no CVSS)
- [CVE-2009-0068](https://cve.now/CVE-2009-0068.md): Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a saf (no CVSS)
- [CVE-2009-0046](https://cve.now/CVE-2009-0046.md): Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVP\_VerifyFinal function, which allows remote attac (no CVSS)
- [CVE-2009-0047](https://cve.now/CVE-2009-0047.md): Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP\_VerifyFinal function, which allows remote attackers to b (no CVSS)
- [CVE-2009-0048](https://cve.now/CVE-2009-0048.md): OpenEvidence 1.0.6 and earlier does not properly check the return value from the OpenSSL EVP\_VerifyFinal function, which allows remote attac (no CVSS)
- [CVE-2009-0049](https://cve.now/CVE-2009-0049.md): Belgian eID middleware (eidlib) 2.6.0 and earlier does not properly check the return value from the OpenSSL EVP\_VerifyFinal function, which (no CVSS)
- [CVE-2009-0050](https://cve.now/CVE-2009-0050.md): Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA\_verify function, which allows remote attackers to bypa (no CVSS)
- [CVE-2009-0051](https://cve.now/CVE-2009-0051.md): ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA\_verify function, which allows remote attackers to bypass (no CVSS)
- [CVE-2008-5077](https://cve.now/CVE-2008-5077.md): OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP\_VerifyFinal function, which allows remote attackers to bypa (no CVSS)
- [CVE-2009-0021](https://cve.now/CVE-2009-0021.md): NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP\_VerifyFinal function, whic (no CVSS)
- [CVE-2009-0025](https://cve.now/CVE-2009-0025.md): BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA\_verify function, which allows rem (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-01-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.