# CVEs published 2009-06-06

12 CVEs were published on June 6, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0023](https://cve.now/CVE-2009-0023.md): The apr\_strmatch\_precompile function in strmatch/apr\_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2009-1419](https://cve.now/CVE-2009-1419.md): Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.0.0 through 2.52, 7.50, and 7.51 on Windows allows remote (no CVSS)
- [CVE-2009-1953](https://cve.now/CVE-2009-1953.md): IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Serve (no CVSS)
- [CVE-2009-1954](https://cve.now/CVE-2009-1954.md): Unspecified vulnerability in portmapper (aka portmap) in IBM AIX 5.3 allows attackers to cause a denial of service (daemon hang) via unknown (no CVSS)
- [CVE-2009-1955](https://cve.now/CVE-2009-1955.md): The expat XML parser in the apr\_xml\_\* interface in xml/apr\_xml.c in Apache APR-util before 1.3.7, as used in the mod\_dav and mod\_dav\_svn mod (no CVSS)
- [CVE-2009-1956](https://cve.now/CVE-2009-1956.md): Off-by-one error in the apr\_brigade\_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obta (no CVSS)
- [CVE-2009-1957](https://cve.now/CVE-2009-1957.md): charon/sa/ike\_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer derefe (no CVSS)
- [CVE-2009-1958](https://cve.now/CVE-2009-1958.md): charon/sa/tasks/child\_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allo (no CVSS)
- [CVE-2009-1959](https://cve.now/CVE-2009-1959.md): Off-by-one error in the event\_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of s (no CVSS)
- [CVE-2009-1960](https://cve.now/CVE-2009-1960.md): inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register\_globals is enabled, allows remote attackers to include an (no CVSS)
- [CVE-2009-1961](https://cve.now/CVE-2009-1961.md): The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29 (no CVSS)
- [CVE-2009-1962](https://cve.now/CVE-2009-1962.md): Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps\[PID\], (2) xfig-pic\[PID\]. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.