CVE-2009-2299

Name: CVE-2009-2299
Creator: NVD / NIST
Published: 2009-07-02T10:30:00.407+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 4.25%

Last modified Jun 16, 2026

CVE-2009-2299 is a vulnerability of currently unknown severity. The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.. EPSS estimates a 4.25% chance of exploitation in the next 30 days.

Description

The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.

Metrics

EPSS Probability

4.25%

89.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Hyperguard Web Application Firewall Project	Hyperguard Web Application Firewall	< 2.5.5-11635
Hyperguard Web Application Firewall Project	Hyperguard Web Application Firewall	>= 3.0, < 3.0.3-11636
Hyperguard Web Application Firewall Project	Hyperguard Web Application Firewall	>= 3.1, < 3.1.1-11637

References

http://secunia.com/advisories/35645Third Party Advisory
http://www.h4ck1nb3rg.at/wafs/advisory_artofdefence_hyperguard_200907.txtBroken Link
http://www.securityfocus.com/archive/1/504680/100/0/threadedThird Party Advisory, VDB Entry
http://secunia.com/advisories/35645Third Party Advisory
http://www.h4ck1nb3rg.at/wafs/advisory_artofdefence_hyperguard_200907.txtBroken Link
http://www.securityfocus.com/archive/1/504680/100/0/threadedThird Party Advisory, VDB Entry

Timeline

Published: Jul 2, 2009
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2009-2299?

How severe is CVE-2009-2299?

Severity scoring for CVE-2009-2299 is pending analysis. The EPSS model estimates a 4.25% probability of exploitation in the next 30 days.

How do I fix CVE-2009-2299?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-2299?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST