NVD

Id
50310  
Name
CVE-2009-3095  
Description
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-09-08  
Modified Date
2016-08-22  
Seq
2009-3095  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254704 50310 CVE-2009-3095 http://intevydis.com/vd-list.shtml  View
254705 50310 CVE-2009-3095 APPLE-SA-2010-03-29-1  View
254706 50310 CVE-2009-3095 SUSE-SA:2009:050  View
254707 50310 CVE-2009-3095 SSRT090244  View
254708 50310 CVE-2009-3095 SSRT100108  View
254709 50310 CVE-2009-3095 HPSBOV02683  View
254710 50310 CVE-2009-3095 SSRT100782  View
254711 50310 CVE-2009-3095 oval:org.mitre.oval:def:8662  View
254712 50310 CVE-2009-3095 oval:org.mitre.oval:def:9363  View
254713 50310 CVE-2009-3095 http://support.apple.com/kb/HT4077  View
254714 50310 CVE-2009-3095 http://wiki.rpath.com/Advisories:rPSA-2009-0155  View
254715 50310 CVE-2009-3095 DSA-1934  View
254716 50310 CVE-2009-3095 20091124 rPSA-2009-0155-1 httpd mod_ssl  View
254717 50310 CVE-2009-3095 https://bugzilla.redhat.com/show_bug.cgi?id=522209  View
254718 50310 CVE-2009-3095 FEDORA-2009-12604  View
254719 50310 CVE-2009-3095 FEDORA-2009-12606  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41181 JVNDB-2009-002188 Apache HTTP Server の mod_proxy_ftp モジュールにおけるアクセス制限を回避される脆弱性 Apache HTTP Server の mod_proxy_ftp モジュールには、アクセス制限を回避され、FTP サーバに任意のコマンドを送信される脆弱性が存在します。 CVE-2009-3095 40526 CVE-2009-3095 50310 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002188.html 2009-09-08 2010-12-15 View