CVE-2009-3346

Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

• http://intevydis.com/vd-list.shtml
• http://secunia.com/advisories/36583Vendor Advisory
• http://www.securityfocus.com/bid/36267
• http://intevydis.com/vd-list.shtml
• http://secunia.com/advisories/36583Vendor Advisory
• http://www.securityfocus.com/bid/36267

Published

Sep 24, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3340Unspecified vulnerability in FreeSSHD 1.2.4 allows remote at…
• CVE-2009-3341Buffer overflow on the Linksys WRT54GL wireless router allow…
• CVE-2009-3342SQL injection vulnerability in frontend/assets/ajax/checkuse…
• CVE-2009-3343SQL injection vulnerability in details.asp in HotWeb Rentals…
• CVE-2009-3344Unspecified vulnerability in SAP Crystal Reports Server 2008…
• CVE-2009-3345Heap-based buffer overflow in SAP Crystal Reports Server 200…
• CVE-2009-3347Buffer overflow on the D-Link DIR-400 wireless router allows…
• CVE-2009-3348Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.…
• CVE-2009-3349SQL injection vulnerability in Datavore Gyro 5.0 allows remo…
• CVE-2009-3350Multiple unspecified vulnerabilities in the Subdomain Manage…
• CVE-2009-3351Multiple unspecified vulnerabilities in the Node Browser mod…
• CVE-2009-3352Multiple unspecified vulnerabilities in the quota_by_role (Q…