CVE-2009-5006

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.

• http://secunia.com/advisories/41710Vendor Advisory
• http://secunia.com/advisories/41812Vendor Advisory
• http://svn.apache.org/viewvc?revision=811188&view=revisionPatch
• http://www.vupen.com/english/advisories/2010/2684Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=642377
• https://issues.apache.org/jira/browse/QPID-2080Patch
• https://rhn.redhat.com/errata/RHSA-2010-0773.htmlPatch, Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0774.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/41710Vendor Advisory
• http://secunia.com/advisories/41812Vendor Advisory
• http://svn.apache.org/viewvc?revision=811188&view=revisionPatch
• http://www.vupen.com/english/advisories/2010/2684Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=642377
• https://issues.apache.org/jira/browse/QPID-2080Patch
• https://rhn.redhat.com/errata/RHSA-2010-0773.htmlPatch, Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0774.htmlPatch, Vendor Advisory

Published

Oct 18, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-5000Multiple cross-site scripting (XSS) vulnerabilities in the W…
• CVE-2009-5001The Workplace (aka WP) component in IBM FileNet P8 Applicati…
• CVE-2009-5002The Workplace (aka WP) component in IBM FileNet P8 Applicati…
• CVE-2009-5003SQL injection vulnerability in click.php in e-soft24 Banner …
• CVE-2009-5004qpid-cpp 1.0 crashes when a large message is sent and the Di…6.5
• CVE-2009-5005The Cluster::deliveredEvent function in cluster/Cluster.cpp …
• CVE-2009-5007The Cisco trial client on Linux for Cisco AnyConnect SSL VPN…
• CVE-2009-5008Cisco Secure Desktop (CSD), when used in conjunction with an…
• CVE-2009-5009Double free vulnerability in OpenConnect before 1.40 might a…
• CVE-2009-5010Race condition in the FTPHandler class in ftpserver.py in py…
• CVE-2009-5011Race condition in the FTPHandler class in ftpserver.py in py…
• CVE-2009-5012ftpserver.py in pyftpdlib before 0.5.2 does not require the …