CVE-2009-3095

The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server…

published September 8, 2009

CVSS
—
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13547 · 96.5th percentile
Published
2009-09-08T18:00Z
EPSS history
Timeline
  • 08 SEP 18:00Z
    The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server…
    cvelistv5