# CVEs published 2009-02-10

40 CVEs were published on February 10, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4283](https://cve.now/CVE-2008-4283.md): CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions all (no CVSS)
- [CVE-2008-4284](https://cve.now/CVE-2008-4284.md): Open redirect vulnerability in the ibm\_security\_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.x versions, (no CVSS)
- [CVE-2009-0075](https://cve.now/CVE-2009-0075.md): Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to e (no CVSS)
- [CVE-2009-0076](https://cve.now/CVE-2009-0076.md): Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the zoom style directiv (no CVSS)
- [CVE-2009-0095](https://cve.now/CVE-2009-0095.md): Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers (no CVSS)
- [CVE-2009-0096](https://cve.now/CVE-2009-0096.md): Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remot (no CVSS)
- [CVE-2009-0097](https://cve.now/CVE-2009-0097.md): Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to (no CVSS)
- [CVE-2009-0098](https://cve.now/CVE-2009-0098.md): Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encap (no CVSS)
- [CVE-2009-0099](https://cve.now/CVE-2009-0099.md): The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, (no CVSS)
- [CVE-2009-0305](https://cve.now/CVE-2009-0305.md): Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry (no CVSS)
- [CVE-2009-0432](https://cve.now/CVE-2009-0432.md): The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WA (no CVSS)
- [CVE-2009-0433](https://cve.now/CVE-2009-0433.md): Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, (no CVSS)
- [CVE-2009-0434](https://cve.now/CVE-2009-0434.md): PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, a (no CVSS)
- [CVE-2009-0435](https://cve.now/CVE-2009-0435.md): Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) component in IBM WebS (no CVSS)
- [CVE-2009-0436](https://cve.now/CVE-2009-0436.md): The (1) mod\_ibm\_ssl and (2) mod\_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Applic (no CVSS)
- [CVE-2009-0437](https://cve.now/CVE-2009-0437.md): The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is registered as a Windo (no CVSS)
- [CVE-2009-0438](https://cve.now/CVE-2009-0438.md): IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization checking" and obtain sen (no CVSS)
- [CVE-2008-6105](https://cve.now/CVE-2008-6105.md): Cross-site scripting (XSS) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6 (no CVSS)
- [CVE-2008-6106](https://cve.now/CVE-2008-6106.md): Cross-site request forgery (CSRF) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Manag (no CVSS)
- [CVE-2008-6107](https://cve.now/CVE-2008-6107.md): The (1) sys32\_mremap function in arch/sparc64/kernel/sys\_sparc32.c, the (2) sparc\_mmap\_check function in arch/sparc/kernel/sys\_sparc.c, and (no CVSS)
- [CVE-2008-6108](https://cve.now/CVE-2008-6108.md): Cross-site scripting (XSS) vulnerability in result.php in Galatolo WebManager (GWM) 1.0 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2008-6099](https://cve.now/CVE-2008-6099.md): PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2008-6100](https://cve.now/CVE-2008-6100.md): Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic\_quotes\_gpc is disabled, allow remote attackers to execute arb (no CVSS)
- [CVE-2008-6101](https://cve.now/CVE-2008-6101.md): SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-6102](https://cve.now/CVE-2008-6102.md): SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL commands via the lnkid pa (no CVSS)
- [CVE-2008-6103](https://cve.now/CVE-2008-6103.md): PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2008-6104](https://cve.now/CVE-2008-6104.md): SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter (no CVSS)
- [CVE-2009-0499](https://cve.now/CVE-2009-0499.md): Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows (no CVSS)
- [CVE-2009-0500](https://cve.now/CVE-2009-0500.md): Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1. (no CVSS)
- [CVE-2009-0501](https://cve.now/CVE-2009-0501.md): Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitiv (no CVSS)
- [CVE-2009-0502](https://cve.now/CVE-2009-0502.md): Cross-site scripting (XSS) vulnerability in blocks/html/block\_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7 (no CVSS)
- [CVE-2009-0490](https://cve.now/CVE-2009-0490.md): Stack-based buffer overflow in the String\_parse::get\_nonspace\_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other ve (no CVSS)
- [CVE-2009-0491](https://cve.now/CVE-2009-0491.md): Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary code via a M3U file c (no CVSS)
- [CVE-2009-0492](https://cve.now/CVE-2009-0492.md): Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth vulnerability." (no CVSS)
- [CVE-2009-0493](https://cve.now/CVE-2009-0493.md): SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Userna (no CVSS)
- [CVE-2009-0494](https://cve.now/CVE-2009-0494.md): SQL injection vulnerability in the Portfol (com\_portfol) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2009-0495](https://cve.now/CVE-2009-0495.md): PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2009-0496](https://cve.now/CVE-2009-0496.md): Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-0497](https://cve.now/CVE-2009-0497.md): Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\\ (do (no CVSS)
- [CVE-2009-0498](https://cve.now/CVE-2009-0498.md): Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attacke (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.