# CVEs published 2009-08-04

11 CVEs were published on August 4, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2198](https://cve.now/CVE-2009-2198.md): Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web server (no CVSS)
- [CVE-2009-2470](https://cve.now/CVE-2009-2470.md): Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corrupti (no CVSS)
- [CVE-2009-2657](https://cve.now/CVE-2009-2657.md): nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary comma (no CVSS)
- [CVE-2009-2658](https://cve.now/CVE-2009-2658.md): Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request. (no CVSS)
- [CVE-2009-2659](https://cve.now/CVE-2009-2659.md): The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media file (no CVSS, django)
- [CVE-2009-2660](https://cve.now/CVE-2009-2660.md): Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large w (no CVSS)
- [CVE-2009-2661](https://cve.now/CVE-2009-2661.md): The asn1\_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificate (no CVSS)
- [CVE-2009-2662](https://cve.now/CVE-2009-2662.md): The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory corruption and applica (no CVSS)
- [CVE-2009-2663](https://cve.now/CVE-2009-2663.md): libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a den (no CVSS)
- [CVE-2009-2664](https://cve.now/CVE-2009-2664.md): The js\_watch\_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause (no CVSS)
- [CVE-2009-2665](https://cve.now/CVE-2009-2665.md): The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-on (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-08-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.