CVE-2009-3095
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...
CVE-2009-3095 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published September 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.5%, the 96th percentile. Fixed in apache2 2.2.13-2.
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
Exploit likelihood
What each source reports
NVD Score used
5.0
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
- Record
CVE-2009-3095- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
- Record
CVE-2009-3095- Updated
- 2026-11-02
EUVDEUVD-2009-3078 No score
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
- Record
EUVD-2009-3078- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w532-9px6-hv54 No score
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
- Record
GHSA-w532-9px6-hv54- Updated
- 2026-11-02
OSV No score
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
- Record
CVE-2009-3095- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-3095 No score
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
- Record
DEBIAN-CVE-2009-3095- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10268-1 No score
apache2-2.4.23-4.1 on GA media
These are all security issues fixed in the apache2-2.4.23-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10268-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.2.13-2 | 2.2.13-2 |
apache2Debian:13 |
before 2.2.13-2 | 2.2.13-2 |
apache2Debian:14 |
before 2.2.13-2 | 2.2.13-2 |
apache2Debian:4.0 |
before 2.2.3-4+etch11, plus listed versions 2.2.3-42.2.3-4+etch12.2.3-4+etch102.2.3-4+etch22.2.3-4+etch3 Show 5 moreShow less2.2.3-4+etch42.2.3-4+etch52.2.3-4+etch62.2.3-4+etch82.2.3-4+etch9 |
2.2.3-4+etch11 |
apache2Debian:5.0 |
before 2.2.9-10+lenny6, plus listed versions 2.2.9-10+lenny22.2.9-10+lenny32.2.9-10+lenny42.2.9-10+lenny5 |
2.2.9-10+lenny6 |
httpdRed Hat:rhel_application_stack:2 |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 |
before 1:2.2.13-2.el5s2 | 1:2.2.13-2.el5s2 |
Show 152 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-clusterRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
phpRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-cliRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-commonRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-develRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-gdRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-imapRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pearRed Hat:rhel_application_stack:2 |
before 1:1.8.1-2.el5s2 | 1:1.8.1-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-soapRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
httpdRed Hat:enterprise_linux:3::as |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::as |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::as |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::desktop |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:3::es |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::es |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::es |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::ws |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpdRed Hat:enterprise_linux:5::client |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
mod_sslRed Hat:enterprise_linux:5::client |
before 1:2.2.3-31.el5_4.2 | 1:2.2.3-31.el5_4.2 |
httpdRed Hat:enterprise_linux:5::server |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-develRed Hat:enterprise_linux:5::server |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-manualRed Hat:enterprise_linux:5::server |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
mod_sslRed Hat:enterprise_linux:5::server |
before 1:2.2.3-31.el5_4.2 | 1:2.2.3-31.el5_4.2 |
httpdRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::as |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpdRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::desktop |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpdRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::es |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpdRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::ws |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpd22Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-aprRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-apr-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-apr-utilRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-apr-util-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
mod_ssl22Red Hat:jboss_enterprise_web_server:1::el4 |
before 1:2.2.10-25.1.ep5.el4 | 1:2.2.10-25.1.ep5.el4 |
httpdRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.10-11.ep5.el5 | 0:2.2.10-11.ep5.el5 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.10-11.ep5.el5 | 0:2.2.10-11.ep5.el5 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.10-11.ep5.el5 | 0:2.2.10-11.ep5.el5 |
mod_sslRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:2.2.10-11.ep5.el5 | 1:2.2.10-11.ep5.el5 |
antRed Hat:certificate_system:7.3 |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
apache2openSUSE:Tumbleweed |
before 2.4.23-4.1 | 2.4.23-4.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8662
marc.info?l=bugtraq&m=127557640302499&w=2
marc.info?l=bugtraq&m=130497311408250&w=2
marc.info?l=bugtraq&m=126998684522511&w=2
secunia.com/advisories/37152
Show 194 moreShow less
lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
debian.org/security/2009/dsa-1934
securityfocus.com/archive/1/508075/100/0/threaded
bugzilla.redhat.com/show_bug.cgi?id=522209
marc.info?l=bugtraq&m=133355494609819&w=2
redhat.com/archives/fedora-package-announce/2009-December/msg00645.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9363
support.apple.com/kb/HT4077
wiki.rpath.com/Advisories:rPSA-2009-0155
redhat.com/archives/fedora-package-announce/2009-December/msg00944.html
intevydis.com/vd-list.shtml
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2009-3095
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E
github.com/advisories/GHSA-w532-9px6-hv54
security-tracker.debian.org/tracker/CVE-2009-3095
access.redhat.com/errata/RHSA-2009:1461
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=466518
bugzilla.redhat.com/show_bug.cgi?id=506896
bugzilla.redhat.com/show_bug.cgi?id=511020
bugzilla.redhat.com/show_bug.cgi?id=521619
bugzilla.redhat.com/show_bug.cgi?id=522084
bugzilla.redhat.com/show_bug.cgi?id=522085
bugzilla.redhat.com/show_bug.cgi?id=522092
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1461.json
access.redhat.com/security/cve/CVE-2008-4456
cve.org/CVERecord?id=CVE-2008-4456
nvd.nist.gov/vuln/detail/CVE-2008-4456
access.redhat.com/security/cve/CVE-2009-2446
cve.org/CVERecord?id=CVE-2009-2446
nvd.nist.gov/vuln/detail/CVE-2009-2446
access.redhat.com/security/cve/CVE-2009-2687
cve.org/CVERecord?id=CVE-2009-2687
nvd.nist.gov/vuln/detail/CVE-2009-2687
access.redhat.com/security/cve/CVE-2009-3094
cve.org/CVERecord?id=CVE-2009-3094
nvd.nist.gov/vuln/detail/CVE-2009-3094
access.redhat.com/security/cve/CVE-2009-3095
cve.org/CVERecord?id=CVE-2009-3095
access.redhat.com/security/cve/CVE-2009-3229
cve.org/CVERecord?id=CVE-2009-3229
nvd.nist.gov/vuln/detail/CVE-2009-3229
access.redhat.com/security/cve/CVE-2009-3230
cve.org/CVERecord?id=CVE-2009-3230
nvd.nist.gov/vuln/detail/CVE-2009-3230
access.redhat.com/security/cve/CVE-2009-3231
cve.org/CVERecord?id=CVE-2009-3231
nvd.nist.gov/vuln/detail/CVE-2009-3231
access.redhat.com/errata/RHSA-2009:1579
access.redhat.com/security/updates/classification
kbase.redhat.com/faq/docs/DOC-20491
bugzilla.redhat.com/show_bug.cgi?id=533125
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1579.json
access.redhat.com/security/cve/CVE-2009-3555
cve.org/CVERecord?id=CVE-2009-3555
nvd.nist.gov/vuln/detail/CVE-2009-3555
access.redhat.com/errata/RHSA-2009:1580
bugzilla.redhat.com/show_bug.cgi?id=509125
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1580.json
access.redhat.com/security/cve/CVE-2009-1891
cve.org/CVERecord?id=CVE-2009-1891
nvd.nist.gov/vuln/detail/CVE-2009-1891
access.redhat.com/errata/RHSA-2010:0011
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0011.json
access.redhat.com/errata/RHSA-2010:0602
redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Updating_Certificate_System_Packages-Updating_a_Solaris_9_system_using_pkgrm_and_pkgadd.html
bugzilla.redhat.com/show_bug.cgi?id=200732
bugzilla.redhat.com/show_bug.cgi?id=237079
bugzilla.redhat.com/show_bug.cgi?id=237080
bugzilla.redhat.com/show_bug.cgi?id=237084
bugzilla.redhat.com/show_bug.cgi?id=237085
bugzilla.redhat.com/show_bug.cgi?id=240423
bugzilla.redhat.com/show_bug.cgi?id=244658
bugzilla.redhat.com/show_bug.cgi?id=244803
bugzilla.redhat.com/show_bug.cgi?id=245111
bugzilla.redhat.com/show_bug.cgi?id=245112
bugzilla.redhat.com/show_bug.cgi?id=247972
bugzilla.redhat.com/show_bug.cgi?id=247976
bugzilla.redhat.com/show_bug.cgi?id=250731
bugzilla.redhat.com/show_bug.cgi?id=289511
bugzilla.redhat.com/show_bug.cgi?id=323571
bugzilla.redhat.com/show_bug.cgi?id=333791
bugzilla.redhat.com/show_bug.cgi?id=419931
bugzilla.redhat.com/show_bug.cgi?id=427228
bugzilla.redhat.com/show_bug.cgi?id=427739
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0602.json
access.redhat.com/security/cve/CVE-2005-2090
cve.org/CVERecord?id=CVE-2005-2090
nvd.nist.gov/vuln/detail/CVE-2005-2090
access.redhat.com/security/cve/CVE-2005-3510
cve.org/CVERecord?id=CVE-2005-3510
nvd.nist.gov/vuln/detail/CVE-2005-3510
access.redhat.com/security/cve/CVE-2006-3835
cve.org/CVERecord?id=CVE-2006-3835
nvd.nist.gov/vuln/detail/CVE-2006-3835
access.redhat.com/security/cve/CVE-2006-3918
cve.org/CVERecord?id=CVE-2006-3918
nvd.nist.gov/vuln/detail/CVE-2006-3918
access.redhat.com/security/cve/CVE-2006-5752
cve.org/CVERecord?id=CVE-2006-5752
nvd.nist.gov/vuln/detail/CVE-2006-5752
access.redhat.com/security/cve/CVE-2007-0450
cve.org/CVERecord?id=CVE-2007-0450
nvd.nist.gov/vuln/detail/CVE-2007-0450
access.redhat.com/security/cve/CVE-2007-1349
cve.org/CVERecord?id=CVE-2007-1349
nvd.nist.gov/vuln/detail/CVE-2007-1349
access.redhat.com/security/cve/CVE-2007-1358
cve.org/CVERecord?id=CVE-2007-1358
nvd.nist.gov/vuln/detail/CVE-2007-1358
access.redhat.com/security/cve/CVE-2007-1863
cve.org/CVERecord?id=CVE-2007-1863
nvd.nist.gov/vuln/detail/CVE-2007-1863
access.redhat.com/security/cve/CVE-2007-3304
cve.org/CVERecord?id=CVE-2007-3304
nvd.nist.gov/vuln/detail/CVE-2007-3304
access.redhat.com/security/cve/CVE-2007-3382
cve.org/CVERecord?id=CVE-2007-3382
nvd.nist.gov/vuln/detail/CVE-2007-3382
access.redhat.com/security/cve/CVE-2007-3385
cve.org/CVERecord?id=CVE-2007-3385
nvd.nist.gov/vuln/detail/CVE-2007-3385
access.redhat.com/security/cve/CVE-2007-3847
cve.org/CVERecord?id=CVE-2007-3847
nvd.nist.gov/vuln/detail/CVE-2007-3847
cve.org/CVERecord?id=CVE-2007-4465
nvd.nist.gov/vuln/detail/CVE-2007-4465
cve.org/CVERecord?id=CVE-2007-5000
nvd.nist.gov/vuln/detail/CVE-2007-5000
cve.org/CVERecord?id=CVE-2007-5116
nvd.nist.gov/vuln/detail/CVE-2007-5116
cve.org/CVERecord?id=CVE-2007-5333
nvd.nist.gov/vuln/detail/CVE-2007-5333
cve.org/CVERecord?id=CVE-2007-5461
nvd.nist.gov/vuln/detail/CVE-2007-5461
cve.org/CVERecord?id=CVE-2007-6388
nvd.nist.gov/vuln/detail/CVE-2007-6388
suse.com/security/cve/CVE-2009-0023
suse.com/security/cve/CVE-2009-1191
suse.com/security/cve/CVE-2009-1195
suse.com/security/cve/CVE-2009-1890
suse.com/security/cve/CVE-2009-1891
suse.com/security/cve/CVE-2009-1955
suse.com/security/cve/CVE-2009-1956
suse.com/security/cve/CVE-2009-2412
suse.com/security/cve/CVE-2009-2699
suse.com/security/cve/CVE-2009-3094
suse.com/security/cve/CVE-2009-3095
suse.com/security/cve/CVE-2009-3555
suse.com/security/cve/CVE-2009-3560
suse.com/security/cve/CVE-2009-3720
suse.com/security/cve/CVE-2010-0408
suse.com/security/cve/CVE-2010-0425
suse.com/security/cve/CVE-2010-0434
suse.com/security/cve/CVE-2010-1452
suse.com/security/cve/CVE-2010-1623
suse.com/security/cve/CVE-2010-2068
suse.com/security/cve/CVE-2011-1176
suse.com/security/cve/CVE-2011-3192
suse.com/security/cve/CVE-2011-3368
suse.com/security/cve/CVE-2011-3607
suse.com/security/cve/CVE-2011-4317
suse.com/security/cve/CVE-2012-0021
suse.com/security/cve/CVE-2012-0031
suse.com/security/cve/CVE-2012-0053
suse.com/security/cve/CVE-2012-2687
Left out here: 107 references. The JSON record has them.