CVE-2009-4405

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."

• http://secunia.com/advisories/37807Vendor Advisory
• http://secunia.com/advisories/37901Vendor Advisory
• http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE
• http://www.vupen.com/english/advisories/2009/3615Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=542394
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54983
• https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01169.html
• http://secunia.com/advisories/37807Vendor Advisory
• http://secunia.com/advisories/37901Vendor Advisory
• http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE
• http://www.vupen.com/english/advisories/2009/3615Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=542394
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54983
• https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01169.html

Published

Dec 23, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4399SQL injection vulnerability in the Parish of the Holy Spirit…
• CVE-2009-4400Cross-site scripting (XSS) vulnerability in the Parish Admin…
• CVE-2009-4401SQL injection vulnerability in the Parish Administration Dat…
• CVE-2009-4402The default configuration of SQL-Ledger 2.8.24 allows remote…
• CVE-2009-4403Cross-site scripting (XSS) vulnerability in index.php in Rum…
• CVE-2009-4404Unspecified vulnerability in t-prot (TOFU Protection) before…
• CVE-2009-4406Cross-site scripting (XSS) vulnerability in Forms/login1 in …
• CVE-2009-4407Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2009-4408Multiple cross-site scripting (XSS) vulnerabilities in model…
• CVE-2009-4409The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities …
• CVE-2009-4410The fuse_ioctl_copy_user function in the ioctl handler in fs…
• CVE-2009-4411The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, …