# CVEs published 2009-02-12

9 CVEs were published on February 12, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0142](https://cve.now/CVE-2009-0142.md): Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service (infinite loop) via unspecified vector (no CVSS)
- [CVE-2009-0545](https://cve.now/CVE-2009-0545.md): cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the ty (no CVSS)
- [CVE-2009-0546](https://cve.now/CVE-2009-0546.md): Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a lon (no CVSS)
- [CVE-2009-0547](https://cve.now/CVE-2009-0547.md): Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text dis (no CVSS)
- [CVE-2009-0548](https://cve.now/CVE-2009-0548.md): Cross-site scripting (XSS) vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remo (no CVSS)
- [CVE-2009-0544](https://cve.now/CVE-2009-0544.md): Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code v (no CVSS)
- [CVE-2008-6123](https://cve.now/CVE-2008-6123.md): The netsnmp\_udp\_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorizati (no CVSS)
- [CVE-2009-0542](https://cve.now/CVE-2009-0542.md): SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (pe (no CVSS)
- [CVE-2009-0543](https://cve.now/CVE-2009-0543.md): ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded m (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.