CVE-2009-2404
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services ...
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.
- Record
CVE-2009-2404- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.
- Record
CVE-2009-2404- Updated
- 2026-11-02
EUVDEUVD-2009-2400 No score
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.
- Record
EUVD-2009-2400- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9w79-fpqx-hcfm No score
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services ...
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.
- Record
GHSA-9w79-fpqx-hcfm- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.
- Record
CVE-2009-2404- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-2404 No score
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.
- Record
DEBIAN-CVE-2009-2404- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nssDebian:12 |
before 3.12.3-1 | 3.12.3-1 |
nssDebian:13 |
before 3.12.3-1 | 3.12.3-1 |
nssDebian:14 |
before 3.12.3-1 | 3.12.3-1 |
nssDebian:5.0 |
before 3.12.3.1-0lenny1, plus listed versions 3.12.0-53.12.0-63.12.1-13.12.2.with.ckbi.1.73-13.12.2.with.ckbi.1.73-23.12.3-1 |
3.12.3.1-0lenny1 |
icedoveDebian:5.0 |
before 2.0.0.24-0lenny1, plus listed versions 2.0.0.19-12.0.0.19-1+kbsd2.0.0.22-0lenny12.0.0.22-12.0.0.22-1.1 |
2.0.0.24-0lenny1 |
nsprRed Hat:enterprise_linux:4::as |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nspr-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nspr-develRed Hat:enterprise_linux:4::as |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nssRed Hat:enterprise_linux:4::as |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
Show 107 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nss-develRed Hat:enterprise_linux:4::as |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-toolsRed Hat:enterprise_linux:4::as |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nsprRed Hat:enterprise_linux:4::desktop |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nspr-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nspr-develRed Hat:enterprise_linux:4::desktop |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nssRed Hat:enterprise_linux:4::desktop |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-develRed Hat:enterprise_linux:4::desktop |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-toolsRed Hat:enterprise_linux:4::desktop |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nsprRed Hat:enterprise_linux:4::es |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nspr-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nspr-develRed Hat:enterprise_linux:4::es |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nssRed Hat:enterprise_linux:4::es |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-develRed Hat:enterprise_linux:4::es |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-toolsRed Hat:enterprise_linux:4::es |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nsprRed Hat:enterprise_linux:4::ws |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nspr-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nspr-develRed Hat:enterprise_linux:4::ws |
before 0:4.7.4-1.el4_8.1 | 0:4.7.4-1.el4_8.1 |
nssRed Hat:enterprise_linux:4::ws |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-develRed Hat:enterprise_linux:4::ws |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
nss-toolsRed Hat:enterprise_linux:4::ws |
before 0:3.12.3.99.3-1.el4_8.2 | 0:3.12.3.99.3-1.el4_8.2 |
seamonkeyRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkeyRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.41.el3 | 0:1.0.9-0.41.el3 |
nsprRed Hat:enterprise_linux:5::client_workstation |
before 0:4.7.4-1.el5_3.1 | 0:4.7.4-1.el5_3.1 |
nspr-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:4.7.4-1.el5_3.1 | 0:4.7.4-1.el5_3.1 |
nspr-develRed Hat:enterprise_linux:5::client_workstation |
before 0:4.7.4-1.el5_3.1 | 0:4.7.4-1.el5_3.1 |
nssRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nss-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nsprRed Hat:enterprise_linux:5::client |
before 0:4.7.4-1.el5_3.1 | 0:4.7.4-1.el5_3.1 |
nspr-debuginfoRed Hat:enterprise_linux:5::client |
before 0:4.7.4-1.el5_3.1 | 0:4.7.4-1.el5_3.1 |
nssRed Hat:enterprise_linux:5::client |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nss-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nss-toolsRed Hat:enterprise_linux:5::client |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nsprRed Hat:enterprise_linux:5::server |
before 0:4.7.4-1.el5_3.1 | 0:4.7.4-1.el5_3.1 |
nspr-debuginfoRed Hat:enterprise_linux:5::server |
before 0:4.7.4-1.el5_3.1 | 0:4.7.4-1.el5_3.1 |
nspr-develRed Hat:enterprise_linux:5::server |
before 0:4.7.4-1.el5_3.1 | 0:4.7.4-1.el5_3.1 |
nssRed Hat:enterprise_linux:5::server |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nss-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nss-develRed Hat:enterprise_linux:5::server |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nss-toolsRed Hat:enterprise_linux:5::server |
before 0:3.12.3.99.3-1.el5_3.2 | 0:3.12.3.99.3-1.el5_3.2 |
nsprRed Hat:rhel_eus:4.7::as |
before 0:4.7.4-1.el4_7.1 | 0:4.7.4-1.el4_7.1 |
nspr-debuginfoRed Hat:rhel_eus:4.7::as |
before 0:4.7.4-1.el4_7.1 | 0:4.7.4-1.el4_7.1 |
nspr-develRed Hat:rhel_eus:4.7::as |
before 0:4.7.4-1.el4_7.1 | 0:4.7.4-1.el4_7.1 |
nssRed Hat:rhel_eus:4.7::as |
before 0:3.12.3.99.3-1.el4_7.6 | 0:3.12.3.99.3-1.el4_7.6 |
nss-debuginfoRed Hat:rhel_eus:4.7::as |
before 0:3.12.3.99.3-1.el4_7.6 | 0:3.12.3.99.3-1.el4_7.6 |
nss-develRed Hat:rhel_eus:4.7::as |
before 0:3.12.3.99.3-1.el4_7.6 | 0:3.12.3.99.3-1.el4_7.6 |
nsprRed Hat:rhel_eus:4.7::es |
before 0:4.7.4-1.el4_7.1 | 0:4.7.4-1.el4_7.1 |
nspr-debuginfoRed Hat:rhel_eus:4.7::es |
before 0:4.7.4-1.el4_7.1 | 0:4.7.4-1.el4_7.1 |
nspr-develRed Hat:rhel_eus:4.7::es |
before 0:4.7.4-1.el4_7.1 | 0:4.7.4-1.el4_7.1 |
nssRed Hat:rhel_eus:4.7::es |
before 0:3.12.3.99.3-1.el4_7.6 | 0:3.12.3.99.3-1.el4_7.6 |
nss-debuginfoRed Hat:rhel_eus:4.7::es |
before 0:3.12.3.99.3-1.el4_7.6 | 0:3.12.3.99.3-1.el4_7.6 |
nss-develRed Hat:rhel_eus:4.7::es |
before 0:3.12.3.99.3-1.el4_7.6 | 0:3.12.3.99.3-1.el4_7.6 |
nsprRed Hat:rhel_eus:5.2 |
before 0:4.7.4-1.el5_2 | 0:4.7.4-1.el5_2 |
nspr-debuginfoRed Hat:rhel_eus:5.2 |
before 0:4.7.4-1.el5_2 | 0:4.7.4-1.el5_2 |
nspr-develRed Hat:rhel_eus:5.2 |
before 0:4.7.4-1.el5_2 | 0:4.7.4-1.el5_2 |
nssRed Hat:rhel_eus:5.2 |
before 0:3.12.3.99.3-1.el5_2 | 0:3.12.3.99.3-1.el5_2 |
nss-debuginfoRed Hat:rhel_eus:5.2 |
before 0:3.12.3.99.3-1.el5_2 | 0:3.12.3.99.3-1.el5_2 |
nss-develRed Hat:rhel_eus:5.2 |
before 0:3.12.3.99.3-1.el5_2 | 0:3.12.3.99.3-1.el5_2 |
nss-pkcs11-develRed Hat:rhel_eus:5.2 |
before 0:3.12.3.99.3-1.el5_2 | 0:3.12.3.99.3-1.el5_2 |
nss-toolsRed Hat:rhel_eus:5.2 |
before 0:3.12.3.99.3-1.el5_2 | 0:3.12.3.99.3-1.el5_2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2404 is a high vulnerability (CVSS 9.3) in Mozilla Network Security Services, published August 3, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.15%, the 90th percentile. Fixed in nss 3.12.3-1.
References
blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf
secunia.com/advisories/36139
us-cert.gov/cas/techalerts/TA10-103B.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11174
Show 51 moreShow less
mandriva.com/security/advisories?name=MDVSA-2009:197
novell.com/linux/security/advisories/2009_48_firefox.html
rhn.redhat.com/errata/RHSA-2009-1185.html
mozilla.org/security/announce/2009/mfsa2009-43.html
securityfocus.com/bid/35891
redhat.com/support/errata/RHSA-2009-1207.html
sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1
ubuntu.com/usn/usn-810-1
oracle.com/technetwork/topics/security/cpuapr2010-099504.html
usn.ubuntu.com/810-2
bugzilla.redhat.com/show_bug.cgi?id=512912
vupen.com/english/advisories/2009/2085
debian.org/security/2009/dsa-1874
nvd.nist.gov/vuln/detail/CVE-2009-2404
github.com/advisories/GHSA-9w79-fpqx-hcfm
security-tracker.debian.org/tracker/CVE-2009-2404
access.redhat.com/errata/RHSA-2009:1184
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1184.json
cve.org/CVERecord?id=CVE-2009-2404