# CVEs published 2009-02-17

15 CVEs were published on February 17, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4285](https://cve.now/CVE-2008-4285.md): Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Container component in IBM We (no CVSS)
- [CVE-2008-6157](https://cve.now/CVE-2008-6157.md): SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain se (no CVSS)
- [CVE-2008-6158](https://cve.now/CVE-2008-6158.md): Multiple unspecified vulnerabilities in the admin backend in w3b\>cms (aka w3blabor CMS) before 3.2.0 have unknown impact and remote attack v (no CVSS)
- [CVE-2009-0359](https://cve.now/CVE-2009-0359.md): Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script (no CVSS)
- [CVE-2009-0363](https://cve.now/CVE-2009-0363.md): Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involv (no CVSS)
- [CVE-2009-0504](https://cve.now/CVE-2009-0504.md): WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly recognize the IDAsse (no CVSS)
- [CVE-2009-0605](https://cve.now/CVE-2009-0605.md): Stack consumption vulnerability in the do\_page\_fault function in arch/x86/mm/fault.c in the Linux kernel before 2.6.28.5 allows local users (no CVSS)
- [CVE-2009-0606](https://cve.now/CVE-2009-0606.md): The link\_image function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.0 on the T-Mobile G1 phone doe (no CVSS)
- [CVE-2009-0607](https://cve.now/CVE-2009-0607.md): Multiple integer overflows in malloc\_leak.c in Bionic in Open Handset Alliance Android 1.0 have unknown impact and attack vectors, related t (no CVSS)
- [CVE-2009-0608](https://cve.now/CVE-2009-0608.md): Integer overflow in the showLog function in fake\_log\_device.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a b (no CVSS)
- [CVE-2009-0609](https://cve.now/CVE-2009-0609.md): Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is us (no CVSS)
- [CVE-2009-0610](https://cve.now/CVE-2009-0610.md): Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code (no CVSS)
- [CVE-2009-0611](https://cve.now/CVE-2009-0611.md): Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allo (no CVSS)
- [CVE-2009-0612](https://cve.now/CVE-2009-0612.md): Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is en (no CVSS)
- [CVE-2009-0613](https://cve.now/CVE-2009-0613.md): Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report Only users to bypass in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.