CVE:CVE-2009-3251
CNNVD:CNNVD-200909-363
vtiger CRM 5.1.0版本之前的版本的include/utils/ListViewUtils.php允许远程认证用户可以借助一个常规核查，绕过预设的访问限制并读取(1)清晰度,(2)定位,和(3)一个日历中的递归字段。
solution:Upgrade vtiger vtiger_crm to a higher version than 5.1.0,and avoid the version (,5.1.0]
solution:Upgrade apache http_server to a higher version than 2.0.64,2.2.14,and avoid the version [2.0.35,2.0.64),[2.2.0,2.2.14); Upgrade fedoraproject fedora to a higher version than 10,12,and avoid the version 10,12; Upgrade debian debian_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade opensuse opensuse to a higher version than 10.3,11.0,11.1,and avoid the version 10.3,11.0,11.1; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp2,10:sp3,and avoid the version 10:sp2,10:sp3; Upgrade suse linux_enterprise_server to a higher version than 9,10:sp2,10:sp3,11,and avoid the version 9,10:sp2,10:sp3,11; Upgrade apple mac_os_x to a higher version than 10.6.3,and avoid the version (,10.6.3)