# CVEs published 2009-10-05

6 CVEs were published on October 5, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3525](https://cve.now/CVE-2009-3525.md): The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, whi (no CVSS)
- [CVE-2009-3544](https://cve.now/CVE-2009-3544.md): Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA af (no CVSS)
- [CVE-2009-3545](https://cve.now/CVE-2009-3545.md): DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial of service (crash) via a long ABOR command. (no CVSS)
- [CVE-2009-3561](https://cve.now/CVE-2009-3561.md): Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a driv (no CVSS)
- [CVE-2009-3562](https://cve.now/CVE-2009-3562.md): Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the c (no CVSS)
- [CVE-2009-2679](https://cve.now/CVE-2009-2679.md): Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unkno (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-10-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.