# CVEs published 2009-06-24

12 CVEs were published on June 24, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2185](https://cve.now/CVE-2009-2185.md): The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1\_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before (no CVSS)
- [CVE-2009-2208](https://cve.now/CVE-2009-2208.md): FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO\_IN6 IOCTL, which allows local users to modify or disable IPv6 (no CVSS)
- [CVE-2009-2209](https://cve.now/CVE-2009-2209.md): SQL injection vulnerability in rscms\_mod\_newsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the key pa (no CVSS)
- [CVE-2009-0903](https://cve.now/CVE-2009-0903.md): IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3, and the Feature Pack for Web Services for WAS 6.1 before 6.1.0.25, when a WS-Secu (no CVSS)
- [CVE-2009-1163](https://cve.now/CVE-2009-1163.md): Memory leak on the Cisco Physical Access Gateway with software before 1.1 allows remote attackers to cause a denial of service (memory consu (no CVSS)
- [CVE-2009-1860](https://cve.now/CVE-2009-1860.md): Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwav (no CVSS)
- [CVE-2009-1886](https://cve.now/CVE-2009-1886.md): Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers (no CVSS)
- [CVE-2009-1888](https://cve.now/CVE-2009-1888.md): The acl\_group\_override function in smbd/posix\_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3 (no CVSS)
- [CVE-2009-2045](https://cve.now/CVE-2009-2045.md): The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillan (no CVSS)
- [CVE-2009-2046](https://cve.now/CVE-2009-2046.md): The embedded web server on the Cisco Video Surveillance 2500 Series IP Camera with firmware before 2.1 allows remote attackers to read arbit (no CVSS)
- [CVE-2009-2186](https://cve.now/CVE-2009-2186.md): Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, (no CVSS)
- [CVE-2009-2187](https://cve.now/CVE-2009-2187.md): Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv\_67 through sn (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.