CVE-2009-3555
Apache Tomcat affected by vulnerability in TLS and SSL protocol
5.8 MediumPublic exploitFix available
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Exploit likelihood
87.3%Up 18.6 points since Feb 4, 2022
What each source reports
CVE List
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
- Record
CVE-2009-3555- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-300
- Updated
- 2026-11-02
EUVDEUVD-2022-3720
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
- Record
EUVD-2022-3720- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-f7w7-6pjc-wwm6
Apache Tomcat affected by vulnerability in TLS and SSL protocol
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Apache Tomcat was affected by this issue and introduced a workaround in versions 7.0.10, 6.0.32, and 5.5.33.
- Record
GHSA-f7w7-6pjc-wwm6- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-295, CWE-300
- Updated
- 2026-11-02
NVD
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
- Record
CVE-2009-3555- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-295, CWE-300
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-3555
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
- Record
DEBIAN-CVE-2009-3555- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVGHSA-f7w7-6pjc-wwm6
Apache Tomcat affected by vulnerability in TLS and SSL protocol
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Apache Tomcat was affected by this issue and introduced a workaround in versions 7.0.10, 6.0.32, and 5.5.33.
- Record
GHSA-f7w7-6pjc-wwm6- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-295, CWE-300
- Updated
- 2026-11-02
Show 6 moreShow less
OSV No score
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
- Record
CVE-2009-3555- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10268-1 No score
apache2-2.4.23-4.1 on GA media
These are all security issues fixed in the apache2-2.4.23-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10268-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
7.0.0 up to 7.0.10 | 7.0.10 |
org.apache.tomcat:tomcatMaven |
6.0.0 up to 6.0.32 | 6.0.32 |
org.apache.tomcat:tomcatMaven |
5.0.0 up to 5.5.33 | 5.5.33 |
apache2Debian:12 |
before 2.2.14-2 | 2.2.14-2 |
apache2Debian:13 |
before 2.2.14-2 | 2.2.14-2 |
apache2Debian:14 |
before 2.2.14-2 | 2.2.14-2 |
lighttpdDebian:12 |
before 1.4.30-1 | 1.4.30-1 |
lighttpdDebian:13 |
before 1.4.30-1 | 1.4.30-1 |
lighttpdDebian:14 |
before 1.4.30-1 | 1.4.30-1 |
nginxDebian:12 |
before 0.7.64-1 | 0.7.64-1 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nginxDebian:13 |
before 0.7.64-1 | 0.7.64-1 |
nginxDebian:14 |
before 0.7.64-1 | 0.7.64-1 |
nssDebian:12 |
before 3.12.6-1 | 3.12.6-1 |
nssDebian:13 |
before 3.12.6-1 | 3.12.6-1 |
nssDebian:14 |
before 3.12.6-1 | 3.12.6-1 |
opensslDebian:12 |
before 0.9.8k-6 | 0.9.8k-6 |
opensslDebian:13 |
before 0.9.8k-6 | 0.9.8k-6 |
opensslDebian:14 |
before 0.9.8k-6 | 0.9.8k-6 |
poundDebian:13 |
before 2.6-6.1 | 2.6-6.1 |
poundDebian:14 |
before 2.6-6.1 | 2.6-6.1 |
tomcat-nativeDebian:12 |
before 1.1.18-1 | 1.1.18-1 |
tomcat-nativeDebian:13 |
before 1.1.18-1 | 1.1.18-1 |
tomcat-nativeDebian:14 |
before 1.1.18-1 | 1.1.18-1 |
poundDebian:6.0 |
before 2.6-1+deb6u1, plus listed versions 2.5-12.5-1.12.6-1 |
2.6-1+deb6u1 |
apache2Debian:4.0 |
before 2.2.3-4+etch11, plus listed versions 2.2.3-42.2.3-4+etch12.2.3-4+etch102.2.3-4+etch22.2.3-4+etch3 Show 5 moreShow less2.2.3-4+etch42.2.3-4+etch52.2.3-4+etch62.2.3-4+etch82.2.3-4+etch9 |
2.2.3-4+etch11 |
apache2Debian:5.0 |
before 2.2.9-10+lenny6, plus listed versions 2.2.9-10+lenny22.2.9-10+lenny32.2.9-10+lenny42.2.9-10+lenny5 |
2.2.9-10+lenny6 |
opensslDebian:5.0 |
before 0.9.8g-15+lenny11, plus listed versions 0.9.8g-150.9.8g-15+lenny10.9.8g-15+lenny30.9.8g-15+lenny50.9.8g-15+lenny60.9.8g-15+lenny70.9.8g-15+lenny80.9.8g-15+lenny9 |
0.9.8g-15+lenny11 |
nssDebian:5.0 |
before 3.12.3.1-0lenny3, plus listed versions 3.12.0-53.12.0-63.12.1-13.12.2.with.ckbi.1.73-13.12.2.with.ckbi.1.73-23.12.3-13.12.3.1-0lenny13.12.3.1-0lenny2 |
3.12.3.1-0lenny3 |
lighttpdDebian:6.0 |
before 1.4.28-2+squeeze1.2, plus listed versions 1.4.28-21.4.28-2+squeeze11.4.28-2+squeeze1.1 |
1.4.28-2+squeeze1.2 |
poundDebian:7 |
before 2.6-2+deb7u1, plus listed versions 2.6-2 |
2.6-2+deb7u1 |
poundDebian:8 |
before 2.6-6+deb8u1, plus listed versions 2.6-6 |
2.6-6+deb8u1 |
httpdRed Hat:enterprise_linux:3::as |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::as |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::as |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::desktop |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:3::es |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::es |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::es |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
httpd-develRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-77.ent | 0:2.0.46-77.ent |
mod_sslRed Hat:enterprise_linux:3::ws |
before 1:2.0.46-77.ent | 1:2.0.46-77.ent |
httpdRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpdRed Hat:enterprise_linux:5::client |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
mod_sslRed Hat:enterprise_linux:5::client |
before 1:2.2.3-31.el5_4.2 | 1:2.2.3-31.el5_4.2 |
httpdRed Hat:enterprise_linux:5::server |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-develRed Hat:enterprise_linux:5::server |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
httpd-manualRed Hat:enterprise_linux:5::server |
before 0:2.2.3-31.el5_4.2 | 0:2.2.3-31.el5_4.2 |
mod_sslRed Hat:enterprise_linux:5::server |
before 1:2.2.3-31.el5_4.2 | 1:2.2.3-31.el5_4.2 |
httpdRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::as |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpdRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::desktop |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpdRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::es |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
httpdRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-develRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-manualRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
httpd-suexecRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.6 | 0:2.0.52-41.ent.6 |
mod_sslRed Hat:enterprise_linux:4::ws |
before 1:2.0.52-41.ent.6 | 1:2.0.52-41.ent.6 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
httpd22Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-aprRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-apr-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-apr-utilRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-apr-util-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
httpd22-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.10-25.1.ep5.el4 | 0:2.2.10-25.1.ep5.el4 |
mod_ssl22Red Hat:jboss_enterprise_web_server:1::el4 |
before 1:2.2.10-25.1.ep5.el4 | 1:2.2.10-25.1.ep5.el4 |
httpdRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.10-11.ep5.el5 | 0:2.2.10-11.ep5.el5 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.10-11.ep5.el5 | 0:2.2.10-11.ep5.el5 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.10-11.ep5.el5 | 0:2.2.10-11.ep5.el5 |
mod_sslRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:2.2.10-11.ep5.el5 | 1:2.2.10-11.ep5.el5 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2_13-2.ep5.el4 | 0:1.2_13-2.ep5.el4 |
httpd22Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-aprRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-apr-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-apr-utilRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-apr-util-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-manualRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2-2.1.ep5.el4 | 0:1.2-2.1.ep5.el4 |
jakarta-commons-digesterRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.8.1-7.ep5.el4 | 0:1.8.1-7.ep5.el4 |
jakarta-commons-ioRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.4-1.ep5.el4 | 0:1.4-1.ep5.el4 |
jakarta-commons-modelerRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.0-3.3.ep5.el4 | 0:2.0-3.3.ep5.el4 |
jakarta-commons-validatorRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.3.1-7.4.ep5.el4 | 0:1.3.1-7.4.ep5.el4 |
jakarta-oroRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.0.8-3jpp.ep1.3.ep5.el4 | 0:2.0.8-3jpp.ep1.3.ep5.el4 |
jboss-javaeeRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.3.ep5.el4 | 0:5.0.1-2.3.ep5.el4 |
jboss-javaee-pomsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.3.ep5.el4 | 0:5.0.1-2.3.ep5.el4 |
jboss-transaction-1.0.1-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.3.ep5.el4 | 0:5.0.1-2.3.ep5.el4 |
mod_jkRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.28-4.ep5.el4 | 0:1.2.28-4.ep5.el4 |
mod_jk-ap20Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.28-4.ep5.el4 | 0:1.2.28-4.ep5.el4 |
mod_jk-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.28-4.ep5.el4 | 0:1.2.28-4.ep5.el4 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.28-4.ep5.el4 | 0:1.2.28-4.ep5.el4 |
mod_ssl22Red Hat:jboss_enterprise_web_server:1::el4 |
before 1:2.2.14-4.ep5.el4 | 1:2.2.14-4.ep5.el4 |
struts12Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.9-2.ep5.el4 | 0:1.2.9-2.ep5.el4 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.19-2.0.ep5.el4 | 0:1.1.19-2.0.ep5.el4 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.19-2.0.ep5.el4 | 0:1.1.19-2.0.ep5.el4 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
xerces-j2Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.9.1-2.2_patch_01.ep5.el4 | 0:2.9.1-2.2_patch_01.ep5.el4 |
xml-commons-resolver12Red Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.2-1.1.ep5.el4 | 1:1.2-1.1.ep5.el4 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2_13-3.ep5.el5 | 0:1.2_13-3.ep5.el5 |
httpdRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.14-1.2.1.ep5.el5 | 0:2.2.14-1.2.1.ep5.el5 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.14-1.2.1.ep5.el5 | 0:2.2.14-1.2.1.ep5.el5 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.14-1.2.1.ep5.el5 | 0:2.2.14-1.2.1.ep5.el5 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2-2.1.1.ep5.el5 | 0:1.2-2.1.1.ep5.el5 |
jakarta-commons-ioRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.4-1.1.ep5.el5 | 0:1.4-1.1.ep5.el5 |
jakarta-oroRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.0.8-3.1.ep5.el5 | 0:2.0.8-3.1.ep5.el5 |
mod_jkRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.28-4.1.ep5.el5 | 0:1.2.28-4.1.ep5.el5 |
mod_jk-ap20Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.28-4.1.ep5.el5 | 0:1.2.28-4.1.ep5.el5 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.28-4.1.ep5.el5 | 0:1.2.28-4.1.ep5.el5 |
mod_sslRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:2.2.14-1.2.1.ep5.el5 | 1:2.2.14-1.2.1.ep5.el5 |
struts12Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.9-2.ep5.el5 | 0:1.2.9-2.ep5.el5 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.1.19-2.0.1.ep5.el5 | 0:1.1.19-2.0.1.ep5.el5 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 |
before 1:1.5.0.11.1-1jpp.3.el4 | 1:1.5.0.11.1-1jpp.3.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.5.0.11.1-1jpp.3.el4 | 1:1.5.0.11.1-1jpp.3.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.5.0.11.1-1jpp.3.el4 | 1:1.5.0.11.1-1jpp.3.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.5.0.11.1-1jpp.3.el4 | 1:1.5.0.11.1-1jpp.3.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.5.0.11.1-1jpp.3.el4 | 1:1.5.0.11.1-1jpp.3.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.5.0.11.1-1jpp.3.el4 | 1:1.5.0.11.1-1jpp.3.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.5.0.11.1-1jpp.3.el4 | 1:1.5.0.11.1-1jpp.3.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.11.1-1jpp.3.el5 | 1:1.5.0.11.1-1jpp.3.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:3 |
before 0:1.4.2.13.4-1jpp.1.el3 | 0:1.4.2.13.4-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 |
before 0:1.4.2.13.4-1jpp.1.el3 | 0:1.4.2.13.4-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 |
before 0:1.4.2.13.4-1jpp.1.el3 | 0:1.4.2.13.4-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 |
before 0:1.4.2.13.4-1jpp.1.el3 | 0:1.4.2.13.4-1jpp.1.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 |
before 0:1.4.2.13.4-1jpp.1.el3 | 0:1.4.2.13.4-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 |
before 0:1.4.2.13.4-1jpp.1.el3 | 0:1.4.2.13.4-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 |
before 0:1.4.2.13.4-1jpp.1.el4 | 0:1.4.2.13.4-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 |
before 0:1.4.2.13.4-1jpp.1.el4 | 0:1.4.2.13.4-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 |
before 0:1.4.2.13.4-1jpp.1.el4 | 0:1.4.2.13.4-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 |
before 0:1.4.2.13.4-1jpp.1.el4 | 0:1.4.2.13.4-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 |
before 0:1.4.2.13.4-1jpp.1.el4 | 0:1.4.2.13.4-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 |
before 0:1.4.2.13.4-1jpp.1.el4 | 0:1.4.2.13.4-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 |
before 0:1.4.2.13.4-1jpp.1.el4 | 0:1.4.2.13.4-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.4-1jpp.1.el5 | 0:1.4.2.13.4-1jpp.1.el5 |
opensslRed Hat:enterprise_linux:5::client_workstation |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
openssl-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
openssl-develRed Hat:enterprise_linux:5::client_workstation |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
opensslRed Hat:enterprise_linux:5::client |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
openssl-debuginfoRed Hat:enterprise_linux:5::client |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
openssl-perlRed Hat:enterprise_linux:5::client |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
opensslRed Hat:enterprise_linux:5::server |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
openssl-debuginfoRed Hat:enterprise_linux:5::server |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
openssl-develRed Hat:enterprise_linux:5::server |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
openssl-perlRed Hat:enterprise_linux:5::server |
before 0:0.9.8e-12.el5_4.6 | 0:0.9.8e-12.el5_4.6 |
opensslRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-debuginfoRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-develRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-perlRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
opensslRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-develRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-perlRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
opensslRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-debuginfoRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-develRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-perlRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
opensslRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-develRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
openssl-perlRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.26 | 0:0.9.7a-33.26 |
opensslRed Hat:enterprise_linux:4::as |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-develRed Hat:enterprise_linux:4::as |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-perlRed Hat:enterprise_linux:4::as |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
opensslRed Hat:enterprise_linux:4::desktop |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-develRed Hat:enterprise_linux:4::desktop |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-perlRed Hat:enterprise_linux:4::desktop |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
opensslRed Hat:enterprise_linux:4::es |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-develRed Hat:enterprise_linux:4::es |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-perlRed Hat:enterprise_linux:4::es |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
opensslRed Hat:enterprise_linux:4::ws |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
openssl-develRed Hat:enterprise_linux:4::ws |
before 0:0.9.7a-43.17.el4_8.5 | 0:0.9.7a-43.17.el4_8.5 |
MozillaFirefoxopenSUSE:Tumbleweed |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed |
before 45.5.1-1.1 | 45.5.1-1.1 |
apache2openSUSE:Tumbleweed |
before 2.4.23-4.1 | 2.4.23-4.1 |
firefox-esropenSUSE:Tumbleweed |
before 128.5.1-1.1 | 128.5.1-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass | 2009-11-10 |
| Exploit-DB | TLS - Renegotiation | 2009-12-21 |
| PoC in GitHub | johnwchadwick/cve-2009-3555-test-server | 2022-03-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3555 is a medium vulnerability (CVSS 5.8) in Apache Http Server, published November 9, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 87.3%, the 99th percentile. Fixed in org.apache.tomcat:tomcat 7.0.10.
References
lists.apple.com/archives/security-announce/2010//May/msg00001.html
securitytracker.com/id?1023427
support.avaya.com/css/P8/documents/100081611
osvdb.org/62210
secunia.com/advisories/37640
arubanetworks.com/support/alerts/aid-020810.txt
Show 194 moreShow less
vupen.com/english/advisories/2010/0916
redhat.com/support/errata/RHSA-2010-0167.html
ietf.org/mail-archive/web/tls/current/msg03948.html
oracle.com/technetwork/topics/security/cpuapr2011-301950.html
blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during
proftpd.org/docs/RELEASE_NOTES-1.3.2c
security.gentoo.org/glsa/glsa-201406-32.xml
ingate.com/Relnote.php?ver=481
marc.info?l=bugtraq&m=134254866602253&w=2
us-cert.gov/cas/techalerts/TA10-222A.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686
lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html
openbsd.org/errata45.html
kbase.redhat.com/faq/docs/DOC-20491
ubuntu.com/usn/USN-927-5
www-01.ibm.com/support/docview.wss?uid=swg1PM12247
mandriva.com/security/advisories?name=MDVSA-2010:089
openssl.org/news/secadv_20091111.txt
debian.org/security/2015/dsa-3253
sunsolve.sun.com/search/document.do?assetkey=1-77-1021752.1-1
lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html
openwall.com/lists/oss-security/2009/11/07/3
links.org?p=786
kb.cert.org/vuls/id/120541
openoffice.org/security/cves/CVE-2009-3555.html
securityfocus.com/bid/36935
tombom.co.uk/blog?p=85
cisco.com/en/US/products/products_security_advisory09186a0080b01d1d.shtml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11617
extendedsubset.com?p=8
exchange.xforce.ibmcloud.com/vulnerabilities/54158
tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html
support.apple.com/kb/HT4004
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html
sysoev.ru/nginx/patch.cve-2009-3555.txt
xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html
itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995
support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released
bugzilla.redhat.com/show_bug.cgi?id=533125
itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
bugzilla.mozilla.org/show_bug.cgi?id=545755
blogs.iss.net/archive/sslmitmiscsrf.html
www-1.ibm.com/support/search.wss?rs=0&q=PM00675&apar=only
vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.597446
opera.com/docs/changelogs/unix/1060
securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html
wiki.rpath.com/Advisories:rPSA-2009-0155
support.citrix.com/article/CTX123359
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049
ubuntu.com/usn/usn-923-1
hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html
svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt
kb.bluecoat.com/index?page=content&id=SA50
betanews.com/article/1257452450
mozilla.org/security/announce/2010/mfsa2010-22.html
seclists.org/fulldisclosure/2009/Nov/139
support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html
lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.html
archives.neohapsis.com/archives/bugtraq/2013-11/0120.html
clicky.me/tlsvuln
lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E
exploit-db.com/exploits/10579
nvd.nist.gov/vuln/detail/CVE-2009-3555
access.redhat.com/errata/RHSA-2009:1579
github.com/apache/tomcat/commit/14e4efd925da58b9fa63f20969fb7349b8a9c30d
bz.apache.org/bugzilla/show_bug.cgi?id=50325
security-tracker.debian.org/tracker/CVE-2009-3555
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1579.json
cve.org/CVERecord?id=CVE-2009-3094
ibm.com/developerworks/java/jdk/alerts
cisa.gov/known-exploited-vulnerabilities-catalog
rhn.redhat.com/errata/RHBA-2010-0491.html
suse.com/security/cve/CVE-2008-5913
This page doesn't list everything
Left out here: 627 package rows and 2,741 references. The JSON record has them. Also not on the record: 255 package claims. ID and package lookups still check them.