CVE-2009-3095: Medium severity apache http server vulnerability
The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
References: http://intevydis.com/vd-list.shtml
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3095?
CVE-2009-3095 has a medium severity rating as it allows attackers to bypass access restrictions.
How do I fix CVE-2009-3095?
To fix CVE-2009-3095, you should upgrade to the latest version of Apache HTTP Server that has patched this vulnerability.
Which versions of Apache are affected by CVE-2009-3095?
CVE-2009-3095 affects Apache HTTP Server versions between 2.0.35 and 2.0.64, as well as versions between 2.2.0 and 2.2.14.
Can CVE-2009-3095 allow arbitrary command execution?
Yes, CVE-2009-3095 allows attackers to send arbitrary commands to an FTP server.
What measures can I take to mitigate CVE-2009-3095?
To mitigate CVE-2009-3095, consider disabling the mod_proxy_ftp module if it is not needed.