CVE-2009-3095

NameCVE-2009-3095
DescriptionThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
ReferencesDSA-1934-1
Debian Bugs545951

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
apache2 (PTS)buster2.4.38-3+deb10u8fixed
buster (security)2.4.38-3+deb10u7fixed
bullseye2.4.54-1~deb11u1fixed
bullseye (security)2.4.52-1~deb11u2fixed
bookworm, sid2.4.54-5fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
apache2sourceetch2.2.3-4+etch11DSA-1934-1
apache2sourcelenny2.2.9-10+lenny6DSA-1934-1
apache2source(unstable)2.2.13-2low545951

Notes

[etch] - apache2 <no-dsa> (minor issue)
The attacker needs to have valid credentials for the FTP server, which
makes this irrelevant in most cases. Based on a VulnDisco commercial 0day.

Search for package or bug name: Reporting problems