Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2009-3095
HistorySep 08, 2009 - 6:30 p.m.

Authorization

2009-09-0818:30:00
PRIOn knowledge base
www.prio-n.com
4

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.7%

JSON

The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.

References

Related

f5 2
openvas 45
httpd 2
veracode 1
ubuntucve 1
cve 1
seebug 2
debiancve 1
securityvulns 3
slackware 1
nessus 29
debian 2
osv 1
centos 2
fedora 3
oraclelinux 2
redhat 4
ubuntu 1
altlinux 3
suse 1
kaspersky 1
threatpost 1
f5
f5
SOL80080243 - Apache vulnerability CVE-2009-3095
2015-12-23 00:00:00
K80080243 : Apache vulnerability CVE-2009-3095
2015-12-23 00:00:00
openvas
openvas
Apache 'mod_proxy_ftp' Module Command Injection Vulnerability (Linux)
2009-09-16 00:00:00
Apache HTTP Server 'mod_proxy_ftp' Module Command Injection Vulnerability
2009-09-16 00:00:00
Mandrake Security Advisory MDVSA-2009:240 (apache)
2009-09-28 00:00:00
httpd
httpd
Apache Httpd < 2.2.14 : mod_proxy_ftp FTP command injection
2009-09-03 00:00:00
Apache Httpd < 2.0.64 : mod_proxy_ftp FTP command injection
2009-09-03 00:00:00
veracode
veracode
Access Restriction Bypass
2020-04-10 00:36:56
ubuntucve
ubuntucve
CVE-2009-3095
2009-09-08 00:00:00
cve
cve
CVE-2009-3095
2009-09-08 18:30:00
seebug
seebug
Apache mod_proxy_ftpζ¨‘ε—θΏœη¨‹ε‘½δ»€ζ³¨ε…₯漏洞
2009-11-13 00:00:00
apache2 vulnerabilities
2009-11-20 00:00:00
debiancve
debiancve
CVE-2009-3095
2009-09-08 18:30:00
securityvulns
securityvulns
Apache mod_proxy_ftp multiple security vulnerabilities
2010-03-31 00:00:00
[ MDVSA-2009:240 ] apache
2009-09-23 00:00:00
[security bulletin] HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS &#40;based on Apache&#41; CSWS, Remote Denial of Service &#40;DoS&#41;, Unauthorized Disclosure of Information, Unauthorized Modification of Information
2010-03-31 00:00:00
slackware
slackware
[slackware-security] httpd
2010-01-25 05:19:48
nessus
nessus
Slackware 12.0 / 12.1 / 12.2 / 13.0 / current : httpd (SSA:2010-024-01)
2010-01-25 00:00:00
Mandriva Linux Security Advisory : apache (MDVSA-2009:240)
2009-09-23 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : apache2 vulnerabilities (USN-860-1)
2009-11-19 00:00:00
debian
debian
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues
2009-11-16 19:30:33
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues
2009-11-16 19:30:33
osv
osv
apache2 - several issues
2009-11-16 00:00:00
centos
centos
httpd, mod_ssl security update
2009-11-12 22:37:02
httpd, mod_ssl security update
2009-11-12 22:39:15
fedora
fedora
[SECURITY] Fedora 11 Update: httpd-2.2.14-1.fc11
2010-02-27 03:41:04
[SECURITY] Fedora 10 Update: httpd-2.2.14-1.fc10
2009-12-10 04:17:40
[SECURITY] Fedora 12 Update: httpd-2.2.14-1.fc12
2009-12-18 04:22:30
oraclelinux
oraclelinux
httpd security update
2009-11-11 00:00:00
httpd security update
2009-11-11 00:00:00
redhat
redhat
(RHSA-2010:0011) Moderate: httpd and httpd22 security update
2010-01-06 00:00:00
(RHSA-2009:1579) Moderate: httpd security update
2009-11-11 00:00:00
(RHSA-2009:1580) Moderate: httpd security update
2009-11-11 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2009-11-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.14-alt1
2009-10-06 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.14-alt1
2009-10-06 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.14-alt1
2009-10-06 00:00:00
suse
suse
potential code execution in apache2,libapr1
2009-10-26 13:21:56
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.7%

JSON
Related for PRION:CVE-2009-3095
f52openvas45httpd2veracode1ubuntucve1cve1seebug2debiancve1securityvulns3slackware1nessus29debian2osv1centos2fedora3oraclelinux2redhat4ubuntu1altlinux3suse1kaspersky1threatpost1