Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-3095
HistorySep 08, 2009 - 6:30 p.m.

CVE-2009-3095

2009-09-0818:30:00
mitre
web.nvd.nist.gov
486
2
apache
http server
mod_proxy_ftp
access restrictions
authorization header
ftp
security vulnerability
nvd
cve-2009-3095

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

9.4

Confidence

High

EPSS

0.008

Percentile

82.3%

JSON

The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.

Affected configurations

Nvd
Node
apachehttp_serverRange2.0.35–2.0.64
OR
apachehttp_serverRange2.2.0–2.2.14
Node
fedoraprojectfedoraMatch10
OR
fedoraprojectfedoraMatch12
Node
debiandebian_linuxMatch4.0
Node
opensuseopensuseMatch10.3
OR
opensuseopensuseMatch11.0
OR
opensuseopensuseMatch11.1
OR
suselinux_enterprise_desktopMatch10sp2
OR
suselinux_enterprise_desktopMatch10sp3
OR
suselinux_enterprise_serverMatch9
OR
suselinux_enterprise_serverMatch10sp2
OR
suselinux_enterprise_serverMatch10sp3-
OR
suselinux_enterprise_serverMatch11-
Node
applemac_os_xRange<10.6.3
VendorProductVersionCPE
apachehttp_server*cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
fedoraprojectfedora10cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*
fedoraprojectfedora12cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*
debiandebian_linux4.0cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
opensuseopensuse10.3cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*
opensuseopensuse11.0cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*
opensuseopensuse11.1cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
suselinux_enterprise_desktop10cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*
suselinux_enterprise_desktop10cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*
suselinux_enterprise_server9cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

References

Social References

More

Related

openvas 45
httpd 2
seebug 2
f5 2
veracode 1
ubuntucve 1
prion 1
debiancve 1
cvelist 1
nvd 1
nessus 29
securityvulns 3
slackware 1
fedora 3
redhat 4
ubuntu 1
debian 2
osv 2
oraclelinux 2
centos 2
altlinux 3
suse 1
kaspersky 1
threatpost 1
openvas
openvas
Apache 'mod_proxy_ftp' Module Command Injection Vulnerability (Linux)
2009-09-16 00:00:00
Apache HTTP Server 'mod_proxy_ftp' Module Command Injection Vulnerability
2009-09-16 00:00:00
Mandrake Security Advisory MDVSA-2009:240 (apache)
2009-09-28 00:00:00
httpd
httpd
Apache Httpd < 2.2.14 : mod_proxy_ftp FTP command injection
2009-09-03 00:00:00
Apache Httpd < 2.0.64 : mod_proxy_ftp FTP command injection
2009-09-03 00:00:00
seebug
seebug
Apache mod_proxy_ftpζ¨‘ε—θΏœη¨‹ε‘½δ»€ζ³¨ε…₯漏洞
2009-11-13 00:00:00
apache2 vulnerabilities
2009-11-20 00:00:00
f5
f5
SOL80080243 - Apache vulnerability CVE-2009-3095
2015-12-23 00:00:00
K80080243 : Apache vulnerability CVE-2009-3095
2015-12-23 00:00:00
veracode
veracode
Access Restriction Bypass
2020-04-10 00:36:56
ubuntucve
ubuntucve
CVE-2009-3095
2009-09-08 00:00:00
prion
prion
Authorization
2009-09-08 18:30:00
debiancve
debiancve
CVE-2009-3095
2009-09-08 18:30:00
cvelist
cvelist
CVE-2009-3095
2009-09-08 18:00:00
nvd
nvd
CVE-2009-3095
2009-09-08 18:30:00
nessus
nessus
Mandriva Linux Security Advisory : apache (MDVSA-2009:240)
2009-09-23 00:00:00
Slackware 12.0 / 12.1 / 12.2 / 13.0 / current : httpd (SSA:2010-024-01)
2010-01-25 00:00:00
RHEL 3 / 5 : httpd (RHSA-2009:1579)
2009-11-12 00:00:00
securityvulns
securityvulns
[ MDVSA-2009:240 ] apache
2009-09-23 00:00:00
Apache mod_proxy_ftp multiple security vulnerabilities
2010-03-31 00:00:00
[security bulletin] HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS &#40;based on Apache&#41; CSWS, Remote Denial of Service &#40;DoS&#41;, Unauthorized Disclosure of Information, Unauthorized Modification of Information
2010-03-31 00:00:00
slackware
slackware
[slackware-security] httpd
2010-01-25 05:19:48
fedora
fedora
[SECURITY] Fedora 12 Update: httpd-2.2.14-1.fc12
2009-12-18 04:22:30
[SECURITY] Fedora 11 Update: httpd-2.2.14-1.fc11
2010-02-27 03:41:04
[SECURITY] Fedora 10 Update: httpd-2.2.14-1.fc10
2009-12-10 04:17:40
redhat
redhat
(RHSA-2009:1579) Moderate: httpd security update
2009-11-11 00:00:00
(RHSA-2010:0011) Moderate: httpd and httpd22 security update
2010-01-06 00:00:00
(RHSA-2009:1580) Moderate: httpd security update
2009-11-11 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2009-11-19 00:00:00
debian
debian
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues
2009-11-16 19:30:33
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues
2009-11-16 19:30:33
osv
osv
apache2 - several issues
2009-11-16 00:00:00
apache2-2.4.23-4.1 on GA media
2024-06-15 00:00:00
oraclelinux
oraclelinux
httpd security update
2009-11-11 00:00:00
httpd security update
2009-11-11 00:00:00
centos
centos
httpd, mod_ssl security update
2009-11-12 22:37:02
httpd, mod_ssl security update
2009-11-12 22:39:15
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.14-alt1
2009-10-06 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.14-alt1
2009-10-06 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.14-alt1
2009-10-06 00:00:00
suse
suse
potential code execution in apache2,libapr1
2009-10-26 13:21:56
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

9.4

Confidence

High

EPSS

0.008

Percentile

82.3%

JSON
Related for CVE-2009-3095
openvas45httpd2seebug2f52veracode1ubuntucve1prion1debiancve1cvelist1nvd1nessus29securityvulns3slackware1fedora3redhat4ubuntu1debian2osv2oraclelinux2centos2altlinux3suse1kaspersky1threatpost1