CVE-2009-1797

Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to hijack the authentication of (1) administrator or (2) device users for requests that create new administrative users or have unspecified other impact.

• CWE-352

• http://holisticinfosec.org/content/view/111/45/
• http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887Vendor Advisory
• http://secunia.com/advisories/37744Vendor Advisory
• http://www.kb.cert.org/vuls/id/166739US Government Resource
• http://holisticinfosec.org/content/view/111/45/
• http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887Vendor Advisory
• http://secunia.com/advisories/37744Vendor Advisory
• http://www.kb.cert.org/vuls/id/166739US Government Resource

Published

Dec 28, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1788Heap-based buffer overflow in voc_read_header in libsndfile …
• CVE-2009-1789mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6…
• CVE-2009-1790Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees…
• CVE-2009-1791Heap-based buffer overflow in aiff_read_header in libsndfile…
• CVE-2009-1792The system.openURL function in StoneTrip Ston3D StandalonePl…
• CVE-2009-1796Cross-site scripting (XSS) vulnerability in Sun Java System …
• CVE-2009-1798Multiple cross-site scripting (XSS) vulnerabilities on the N…
• CVE-2009-1799Multiple SQL injection vulnerabilities in the getGalleryImag…
• CVE-2009-1800Stack-based buffer overflow in the Chinagames CGAgent Active…
• CVE-2009-1801Multiple cross-site scripting (XSS) vulnerabilities in FreeP…
• CVE-2009-1802Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2009-1803FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x…