CVE-2009-3095
UnknownEPSS 12.56%
Last modified
CVE-2009-3095 is a vulnerability of currently unknown severity. The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.. EPSS estimates a 12.56% chance of exploitation in the next 30 days.
Description
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Apache | Http Server | >= 2.0.35, < 2.0.64 | — |
| Apache | Http Server | >= 2.2.0, < 2.2.14 | — |
| Fedoraproject | Fedora | 10 | — |
| Fedoraproject | Fedora | 12 | — |
| Debian | Debian Linux | 4.0 | — |
| Opensuse | Opensuse | 10.3 | — |
| Opensuse | Opensuse | 11.0 | — |
| Opensuse | Opensuse | 11.1 | — |
| Suse | Linux Enterprise Desktop | 10 | Sp2 |
| Suse | Linux Enterprise Server | 9 | — |
| Suse | Linux Enterprise Server | 10 | Sp2 |
| Suse | Linux Enterprise Server | 11 | — |
| Apple | Mac Os X | < 10.6.3 | — |
References
- http://intevydis.com/vd-list.shtmlBroken Link
- http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.htmlMailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=126998684522511&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=127557640302499&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=130497311408250&w=2Not Applicable, Third Party Advisory
- http://marc.info/?l=bugtraq&m=133355494609819&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://secunia.com/advisories/37152Not Applicable, Third Party Advisory
- http://support.apple.com/kb/HT4077Third Party Advisory
- http://www.debian.org/security/2009/dsa-1934Third Party Advisory
- http://www.securityfocus.com/archive/1/508075/100/0/threadedThird Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=522209Issue Tracking, Third Party Advisory
- http://intevydis.com/vd-list.shtmlBroken Link
- http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.htmlMailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=126998684522511&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=127557640302499&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=130497311408250&w=2Not Applicable, Third Party Advisory
- http://marc.info/?l=bugtraq&m=133355494609819&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://secunia.com/advisories/37152Not Applicable, Third Party Advisory
- http://support.apple.com/kb/HT4077Third Party Advisory
- http://www.debian.org/security/2009/dsa-1934Third Party Advisory
- http://www.securityfocus.com/archive/1/508075/100/0/threadedThird Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=522209Issue Tracking, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-3095?
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
How severe is CVE-2009-3095?
Severity scoring for CVE-2009-3095 is pending analysis. The EPSS model estimates a 12.56% probability of exploitation in the next 30 days.
How do I fix CVE-2009-3095?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-3089IBM Tivoli Directory Server (TDS) 6.0 allows remote attacker…
- CVE-2009-3090Unspecified vulnerability in IBM Tivoli Directory Server (TD…
- CVE-2009-3091Unspecified vulnerability on the ASUS WL-330gE has unknown i…
- CVE-2009-3092Buffer overflow on the ASUS WL-500W wireless router has unkn…
- CVE-2009-3093Unspecified vulnerability on the ASUS WL-500W wireless route…
- CVE-2009-3094The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp…
- CVE-2009-3096Multiple unspecified vulnerabilities in HP Performance Insig…
- CVE-2009-3097Multiple unspecified vulnerabilities in HP Performance Insig…
- CVE-2009-3098Unspecified vulnerability in the Portal in HP Operations Das…
- CVE-2009-3099Unspecified vulnerability in HP OpenView Operations Manager …
- CVE-2009-3100xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 1…
- CVE-2009-3101xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and…
Are you affected by CVE-2009-3095?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST