# CVEs published 2009-03-12

17 CVEs were published on March 12, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0366](https://cve.now/CVE-2009-0366.md): The uncompress\_buffer function in src/server/simple\_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service vi (no CVSS)
- [CVE-2009-0632](https://cve.now/CVE-2009-0632.md): The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, (no CVSS)
- [CVE-2009-0778](https://cve.now/CVE-2009-0778.md): The icmp\_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not prope (no CVSS)
- [CVE-2009-0874](https://cve.now/CVE-2009-0874.md): Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv\_94, allow (no CVSS)
- [CVE-2009-0875](https://cve.now/CVE-2009-0875.md): Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv\_94, allows local users to cause (no CVSS)
- [CVE-2009-0876](https://cve.now/CVE-2009-0876.md): Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hard (no CVSS)
- [CVE-2009-0877](https://cve.now/CVE-2009-0877.md): Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2009-0878](https://cve.now/CVE-2009-0878.md): The read\_game\_map function in src/terrain\_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (mem (no CVSS)
- [CVE-2009-0879](https://cve.now/CVE-2009-0879.md): The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) (no CVSS)
- [CVE-2009-0880](https://cve.now/CVE-2009-0880.md): Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to loa (no CVSS)
- [CVE-2009-0881](https://cve.now/CVE-2009-0881.md): SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS)
- [CVE-2009-0882](https://cve.now/CVE-2009-0882.md): Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to sh (no CVSS)
- [CVE-2009-0883](https://cve.now/CVE-2009-0883.md): SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitra (no CVSS)
- [CVE-2009-0884](https://cve.now/CVE-2009-0884.md): Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SS (no CVSS)
- [CVE-2009-0885](https://cve.now/CVE-2009-0885.md): Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service (ap (no CVSS)
- [CVE-2009-0886](https://cve.now/CVE-2009-0886.md): Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2009-0887](https://cve.now/CVE-2009-0887.md): Integer signedness error in the \_pam\_StrTok function in libpam/pam\_misc.c in Linux-PAM (aka pam) 1.0.3 and earlier, when a configuration fil (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.