CVE-2009-3095

NameCVE-2009-3095
DescriptionThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-1934-1
Debian Bugs545951

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
apache2 (PTS)jessie, jessie (lts)2.4.10-10+deb8u27fixed
stretch (security)2.4.25-3+deb9u13fixed
stretch (lts), stretch2.4.25-3+deb9u16fixed
buster2.4.38-3+deb10u8fixed
buster (security)2.4.59-1~deb10u1fixed
bullseye2.4.56-1~deb11u2fixed
bullseye (security)2.4.59-1~deb11u1fixed
bookworm2.4.57-2fixed
bookworm (security)2.4.59-1~deb12u1fixed
sid, trixie2.4.59-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
apache2sourceetch2.2.3-4+etch11DSA-1934-1
apache2sourcelenny2.2.9-10+lenny6DSA-1934-1
apache2source(unstable)2.2.13-2low545951

Notes

[etch] - apache2 <no-dsa> (minor issue)
The attacker needs to have valid credentials for the FTP server, which
makes this irrelevant in most cases. Based on a VulnDisco commercial 0day.

Search for package or bug name: Reporting problems