# CVEs published 2009-12-11

6 CVEs were published on December 11, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4296](https://cve.now/CVE-2009-4296.md): SQL injection vulnerability in the Taxonomy Timer module 5.x-1.8 and earlier and 6.x-alpha1 and earlier for Drupal allows remote attackers t (no CVSS)
- [CVE-2009-3027](https://cve.now/CVE-2009-3027.md): VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (no CVSS)
- [CVE-2009-4124](https://cve.now/CVE-2009-4124.md): Heap-based buffer overflow in the rb\_str\_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to (no CVSS)
- [CVE-2009-4135](https://cve.now/CVE-2009-4135.md): The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file (no CVSS)
- [CVE-2009-4294](https://cve.now/CVE-2009-4294.md): Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to exec (no CVSS)
- [CVE-2009-4295](https://cve.now/CVE-2009-4295.md): Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU devi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-12-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.