CVE-2009-2865

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779.

• CWE-119

• http://osvdb.org/58335
• http://tools.cisco.com/security/center/viewAlert.x?alertId=18884Patch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8116.shtmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/36498
• http://www.securitytracker.com/id?1022932
• http://www.vupen.com/english/advisories/2009/2758Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53448
• http://osvdb.org/58335
• http://tools.cisco.com/security/center/viewAlert.x?alertId=18884Patch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8116.shtmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/36498
• http://www.securitytracker.com/id?1022932
• http://www.vupen.com/english/advisories/2009/2758Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53448

Published

Sep 28, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2859IBM DB2 8.1 before FP18 allows attackers to obtain unspecifi…
• CVE-2009-2860Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP…
• CVE-2009-2861The Over-the-Air Provisioning (OTAP) functionality on Cisco …
• CVE-2009-2862The Object Groups for Access Control Lists (ACLs) feature in…
• CVE-2009-2863Race condition in the Firewall Authentication Proxy feature …
• CVE-2009-2864Cisco Unified Communications Manager (aka CUCM, formerly Cal…
• CVE-2009-2866Unspecified vulnerability in Cisco IOS 12.2 through 12.4 all…
• CVE-2009-2867Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.…
• CVE-2009-2868Unspecified vulnerability in Cisco IOS 12.2 through 12.4, wh…
• CVE-2009-2869Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.…
• CVE-2009-2870Unspecified vulnerability in Cisco IOS 12.2 through 12.4, wh…
• CVE-2009-2871Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when S…