# CVEs published 2010-03-05

42 CVEs were published on March 5, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3032](https://cve.now/CVE-2009-3032.md): Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail S (no CVSS)
- [CVE-2009-3245](https://cve.now/CVE-2009-3245.md): OpenSSL before 0.9.8m does not check for a NULL return value from bn\_wexpand function calls in (1) crypto/bn/bn\_div.c, (2) crypto/bn/bn\_gf2m (no CVSS)
- [CVE-2009-4676](https://cve.now/CVE-2009-4676.md): Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2010-0302](https://cve.now/CVE-2010-0302.md): Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the s (no CVSS)
- [CVE-2010-0393](https://cve.now/CVE-2010-0393.md): The \_cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to de (no CVSS)
- [CVE-2010-0425](https://cve.now/CVE-2010-0425.md): modules/arch/win32/mod\_isapi.c in mod\_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, w (no CVSS)
- [CVE-2010-0433](https://cve.now/CVE-2010-0433.md): The kssl\_keytab\_is\_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cann (no CVSS)
- [CVE-2010-0434](https://cve.now/CVE-2010-0434.md): The ap\_read\_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not (no CVSS)
- [CVE-2010-0570](https://cve.now/CVE-2010-0570.md): Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for re (no CVSS)
- [CVE-2010-0571](https://cve.now/CVE-2010-0571.md): Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unkn (no CVSS)
- [CVE-2010-0572](https://cve.now/CVE-2010-0572.md): Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vector (no CVSS)
- [CVE-2010-0573](https://cve.now/CVE-2010-0573.md): Unspecified vulnerability on the Cisco Digital Media Player before 5.2 allows remote attackers to hijack the source of (1) video or (2) data (no CVSS)
- [CVE-2010-0792](https://cve.now/CVE-2010-0792.md): fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file. (no CVSS)
- [CVE-2010-0928](https://cve.now/CVE-2010-0928.md): OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for cert (no CVSS)
- [CVE-2010-0929](https://cve.now/CVE-2010-0929.md): The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted dat (no CVSS)
- [CVE-2010-0930](https://cve.now/CVE-2010-0930.md): The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite loop) via crafted da (no CVSS)
- [CVE-2010-0931](https://cve.now/CVE-2010-0931.md): The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted dat (no CVSS)
- [CVE-2010-0932](https://cve.now/CVE-2010-0932.md): The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) vi (no CVSS)
- [CVE-2010-0933](https://cve.now/CVE-2010-0933.md): Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (no CVSS)
- [CVE-2010-0934](https://cve.now/CVE-2010-0934.md): The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating- (no CVSS)
- [CVE-2010-0935](https://cve.now/CVE-2010-0935.md): Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a " (no CVSS)
- [CVE-2009-4665](https://cve.now/CVE-2009-4665.md): Directory traversal vulnerability in CuteSoft\_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attac (no CVSS, CuteEditor)
- [CVE-2009-4666](https://cve.now/CVE-2009-4666.md): Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2009-4667](https://cve.now/CVE-2009-4667.md): SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL commands via the formID (no CVSS)
- [CVE-2009-4668](https://cve.now/CVE-2009-4668.md): Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2009-4669](https://cve.now/CVE-2009-4669.md): Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the loginus pa (no CVSS)
- [CVE-2009-4670](https://cve.now/CVE-2009-4670.md): admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via the (no CVSS)
- [CVE-2009-4671](https://cve.now/CVE-2009-4671.md): Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the room\_phplan (no CVSS)
- [CVE-2009-4672](https://cve.now/CVE-2009-4672.md): Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbi (no CVSS)
- [CVE-2009-4673](https://cve.now/CVE-2009-4673.md): SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2009-4674](https://cve.now/CVE-2009-4674.md): admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary pas (no CVSS)
- [CVE-2009-4675](https://cve.now/CVE-2009-4675.md): admin/admin\_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, whi (no CVSS)
- [CVE-2010-0927](https://cve.now/CVE-2010-0927.md): Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before (no CVSS)
- [CVE-2009-2753](https://cve.now/CVE-2009-2753.md): Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka po (no CVSS)
- [CVE-2009-2754](https://cve.now/CVE-2009-2754.md): Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka por (no CVSS)
- [CVE-2010-0408](https://cve.now/CVE-2010-0408.md): The ap\_proxy\_ajp\_request function in mod\_proxy\_ajp.c in mod\_proxy\_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle (no CVSS)
- [CVE-2010-0419](https://cve.now/CVE-2010-0419.md): The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment se (no CVSS)
- [CVE-2010-0587](https://cve.now/CVE-2010-0587.md): Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8. (no CVSS)
- [CVE-2010-0588](https://cve.now/CVE-2010-0588.md): Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows (no CVSS)
- [CVE-2010-0590](https://cve.now/CVE-2010-0590.md): The CMSIPUtility component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(3a)su1 and 8.x before 8.0 (no CVSS)
- [CVE-2010-0591](https://cve.now/CVE-2010-0591.md): Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows (no CVSS)
- [CVE-2010-0592](https://cve.now/CVE-2010-0592.md): The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a, 6.x before 6.1(3), 7 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.