# CVEs published 2009-03-27

15 CVEs were published on March 27, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0590](https://cve.now/CVE-2009-0590.md): The ASN1\_STRING\_print\_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and a (no CVSS)
- [CVE-2009-0591](https://cve.now/CVE-2009-0591.md): The CMS\_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed sig (no CVSS)
- [CVE-2009-0626](https://cve.now/CVE-2009-0626.md): The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted (no CVSS)
- [CVE-2009-0628](https://cve.now/CVE-2009-0628.md): Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption an (no CVSS)
- [CVE-2009-0629](https://cve.now/CVE-2009-0629.md): The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Inter (no CVSS)
- [CVE-2009-0630](https://cve.now/CVE-2009-0630.md): The (1) Cisco Unified Communications Manager Express; (2) SIP Gateway Signaling Support Over Transport Layer Security (TLS) Transport; (3) S (no CVSS)
- [CVE-2009-0633](https://cve.now/CVE-2009-0633.md): Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 (no CVSS)
- [CVE-2009-0634](https://cve.now/CVE-2009-0634.md): Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 su (no CVSS)
- [CVE-2009-0635](https://cve.now/CVE-2009-0635.md): Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is e (no CVSS)
- [CVE-2009-0636](https://cve.now/CVE-2009-0636.md): Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of (no CVSS)
- [CVE-2009-0637](https://cve.now/CVE-2009-0637.md): The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file t (no CVSS)
- [CVE-2009-0789](https://cve.now/CVE-2009-0789.md): OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attacke (no CVSS)
- [CVE-2009-0845](https://cve.now/CVE-2009-0845.md): The spnego\_gss\_accept\_sec\_context function in lib/gssapi/spnego/spnego\_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is (no CVSS)
- [CVE-2009-0631](https://cve.now/CVE-2009-0631.md): Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session (no CVSS)
- [CVE-2009-1169](https://cve.now/CVE-2009-1169.md): The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-03-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.