# CVEs published 2009-03-11

13 CVEs were published on March 11, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4563](https://cve.now/CVE-2008-4563.md): Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (no CVSS)
- [CVE-2009-0093](https://cve.now/CVE-2009-0093.md): Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restr (no CVSS)
- [CVE-2009-0094](https://cve.now/CVE-2009-0094.md): The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" (no CVSS)
- [CVE-2009-0233](https://cve.now/CVE-2009-0233.md): The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, (no CVSS)
- [CVE-2009-0234](https://cve.now/CVE-2009-0234.md): The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 (no CVSS)
- [CVE-2009-0660](https://cve.now/CVE-2009-0660.md): Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitr (no CVSS)
- [CVE-2009-0712](https://cve.now/CVE-2009-0712.md): Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows local users to gain privileges via unknown vect (no CVSS)
- [CVE-2009-0713](https://cve.now/CVE-2009-0713.md): Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows remote attackers to obtain sensitive informatio (no CVSS)
- [CVE-2009-0848](https://cve.now/CVE-2009-0848.md): Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK mo (no CVSS)
- [CVE-2009-0854](https://cve.now/CVE-2009-0854.md): Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan hor (no CVSS)
- [CVE-2009-0871](https://cve.now/CVE-2009-0871.md): The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Bu (no CVSS)
- [CVE-2009-0872](https://cve.now/CVE-2009-0872.md): The NFS server in Sun Solaris 10, and OpenSolaris before snv\_111, does not properly implement the AUTH\_NONE (aka sec=none) security mode in (no CVSS)
- [CVE-2009-0873](https://cve.now/CVE-2009-0873.md): The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv\_106, when NFSv3 is used, does not properly implement combinations of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-03-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.