CVE-2009-3094
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...
2.6 LowFix available
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
Exploit likelihood
8.57%Up 3.3 points since Feb 4, 2022
What each source reports
NVD Score used
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
- Record
CVE-2009-3094- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
- Record
CVE-2009-3094- Updated
- 2026-11-02
EUVDEUVD-2009-3077 No score
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
- Record
EUVD-2009-3077- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vg4c-4xc2-v43h No score
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
- Record
GHSA-vg4c-4xc2-v43h- Weakness
- CWE-476
- Updated
- 2026-11-02
OSVBELL-CVE-2009-3094
CVE-2009-3094 does not affect BellSoft software
- Record
BELL-CVE-2009-3094- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSV No score
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
- Record
CVE-2009-3094- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-3094 No score
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
- Record
DEBIAN-CVE-2009-3094- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10268-1 No score
apache2-2.4.23-4.1 on GA media
These are all security issues fixed in the apache2-2.4.23-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10268-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.2.13-2 | 2.2.13-2 |
apache2Debian:13 |
before 2.2.13-2 | 2.2.13-2 |
apache2Debian:14 |
before 2.2.13-2 | 2.2.13-2 |
apache2Debian:4.0 From an advisory covering 3 CVEs |
before 2.2.3-4+etch11, plus listed versions 2.2.3-42.2.3-4+etch12.2.3-4+etch102.2.3-4+etch22.2.3-4+etch3 Show 5 moreShow less2.2.3-4+etch42.2.3-4+etch52.2.3-4+etch62.2.3-4+etch82.2.3-4+etch9 |
2.2.3-4+etch11 |
apache2Debian:5.0 From an advisory covering 3 CVEs |
before 2.2.9-10+lenny6, plus listed versions 2.2.9-10+lenny22.2.9-10+lenny32.2.9-10+lenny42.2.9-10+lenny5 |
2.2.9-10+lenny6 |
httpdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 1:2.2.13-2.el5s2 | 1:2.2.13-2.el5s2 |
Show 152 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-clusterRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
phpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-cliRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-commonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-gdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-imapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pearRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 1:1.8.1-2.el5s2 | 1:1.8.1-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-soapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
httpdRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpdRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
mod_sslRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 1:2.2.3-31.el5_4.2 | 1:2.2.3-31.el5_4.2 |
httpdRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-manualRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
mod_sslRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 1:2.2.3-31.el5_4.2 | 1:2.2.3-31.el5_4.2 |
httpdRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpdRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpdRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpdRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpd22Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 3 CVEs |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-aprRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 3 CVEs |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-apr-develRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 3 CVEs |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-apr-utilRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 3 CVEs |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-apr-util-develRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 3 CVEs |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 3 CVEs |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-develRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 3 CVEs |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
mod_ssl22Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 3 CVEs |
before 1:2.2.10-25.1.ep5.el4 | 1:2.2.10-25.1.ep5.el4 |
httpdRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 3 CVEs |
before 0:2.2.10-11.ep5.el5 | 0:2.2.10-11.ep5.el5 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 3 CVEs |
before 0:2.2.10-11.ep5.el5 | 0:2.2.10-11.ep5.el5 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 3 CVEs |
before 0:2.2.10-11.ep5.el5 | 0:2.2.10-11.ep5.el5 |
mod_sslRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 3 CVEs |
before 1:2.2.10-11.ep5.el5 | 1:2.2.10-11.ep5.el5 |
antRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
apache2openSUSE:Tumbleweed From an advisory covering 48 CVEs |
before 2.4.23-4.1 | 2.4.23-4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3094 is a low vulnerability (CVSS 2.6) in Apache Http Server, published September 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.57%, the 95th percentile. Fixed in apache2 2.2.13-2.
References
lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10981
vupen.com/english/advisories/2010/0609
marc.info?l=bugtraq&m=127557640302499&w=2
secunia.com/advisories/37152
Show 194 moreShow less
debian.org/security/2009/dsa-1934
www-01.ibm.com/support/docview.wss?uid=swg1PK96858
securityfocus.com/archive/1/508075/100/0/threaded
intevydis.com/blog?p=59
redhat.com/archives/fedora-package-announce/2009-December/msg00645.html
wiki.rpath.com/Advisories:rPSA-2009-0155
bugzilla.redhat.com/show_bug.cgi?id=521619
intevydis.com/vd-list.shtml
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2009-3094
github.com/advisories/GHSA-vg4c-4xc2-v43h
docs.bell-sw.com/security/cves/CVE-2009-3094
security-tracker.debian.org/tracker/CVE-2009-3094
access.redhat.com/errata/RHSA-2009:1461
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1461.json
cve.org/CVERecord?id=CVE-2008-4456
kbase.redhat.com/faq/docs/DOC-20491
suse.com/security/cve/CVE-2009-0023
This page doesn't list everything
Left out here: 108 references. The JSON record has them.