CVE-2009-3095

NameCVE-2009-3095
DescriptionThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-1934-1
NVD severityhigh (attack range: remote)
Debian Bugs545951

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
apache2 (PTS)wheezy2.2.22-13+deb7u6fixed
wheezy (security)2.2.22-13+deb7u12fixed
jessie2.4.10-10+deb8u9fixed
jessie (security)2.4.10-10+deb8u11fixed
stretch (security), stretch2.4.25-3+deb9u3fixed
buster, sid2.4.27-6fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
apache2source(unstable)2.2.13-2low545951
apache2sourceetch2.2.3-4+etch11highDSA-1934-1
apache2sourcelenny2.2.9-10+lenny6highDSA-1934-1

Notes

[etch] - apache2 <no-dsa> (minor issue)
The attacker needs to have valid credentials for the FTP server, which
makes this irrelevant in most cases. Based on a VulnDisco commercial 0day.

Search for package or bug name: Reporting problems