Vulnerability in Apache HTTP Server
CVE-2009-3095
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
EPSS: 0.126 (95.8th percentile) — read the EPSS interpretation.
Affected products
- Apache Http_server
- Apple Mac_os_x
- Debian Debian_linux — versions 4.0
- Fedoraproject Fedora — versions 10, 12
- Opensuse — versions 10.3, 11.0, 11.1
- Suse Linux_enterprise_desktop — versions 10
- Suse Linux_enterprise_server — versions 9, 10, 11
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
- cve@mitre.org (x_refsource_HP, vendor-advisory, Mailing List, Third Party Advisory, Issue Tracking)
- cve@mitre.org (x_refsource_HP, vendor-advisory, Third Party Advisory, Not Applicable)
- cve@mitre.org (x_refsource_HP, vendor-advisory, Mailing List, Third Party Advisory, Issue Tracking)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, Not Applicable, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_APPLE, Mailing List, Third Party Advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
Frequently asked questions
- What is CVE-2009-3095?
- CVE-2009-3095 is a vulnerability in Apache HTTP Server. Published 2009-09-08.
- Is CVE-2009-3095 known to be exploited?
- 15 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.