NVD

Id
50309  
Name
CVE-2009-3094  
Description
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-09-08  
Modified Date
2016-08-22  
Seq
2009-3094  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254687 50309 CVE-2009-3094 http://intevydis.com/vd-list.shtml  View
254688 50309 CVE-2009-3094 SUSE-SA:2009:050  View
254689 50309 CVE-2009-3094 SSRT090244  View
254690 50309 CVE-2009-3094 SSRT100108  View
254691 50309 CVE-2009-3094 SSRT100782  View
254692 50309 CVE-2009-3094 oval:org.mitre.oval:def:10981  View
254693 50309 CVE-2009-3094 oval:org.mitre.oval:def:8087  View
254694 50309 CVE-2009-3094 http://wiki.rpath.com/Advisories:rPSA-2009-0155  View
254695 50309 CVE-2009-3094 PK96858  View
254696 50309 CVE-2009-3094 PM09161  View
254697 50309 CVE-2009-3094 DSA-1934  View
254698 50309 CVE-2009-3094 http://www.intevydis.com/blog/?p=59  View
254699 50309 CVE-2009-3094 20091124 rPSA-2009-0155-1 httpd mod_ssl  View
254700 50309 CVE-2009-3094 ADV-2010-0609  View
254701 50309 CVE-2009-3094 https://bugzilla.redhat.com/show_bug.cgi?id=521619  View
254702 50309 CVE-2009-3094 FEDORA-2009-12604  View
254703 50309 CVE-2009-3094 FEDORA-2009-12606  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41180 JVNDB-2009-002187 Apache HTTP Server の ap_proxy_ftp_handler 関数におけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server の mod_proxy_ftp モジュールにある ap_proxy_ftp_handler 関数には、EPSV コマンドへのリプライの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-3094 40525 CVE-2009-3094 50309 5.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002187.html 2009-09-08 2010-12-15 View