CVE-2009-3555
92Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 9.8epss 87%
from disclosure to weapon1 days
Published on NVDNov 9
1st PoC+1d
VulnCheck+9d
exploitation probability
87%top 1% of all CVEs
observed exploitation
yesVulnCheck
4 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Fixed
46 products (3,184 components)
Red Hat Satellite 6.1 · Red Hat Enterprise Linux Server Supplementary (v. 5) · Red Hat Satellite Capsule 6.1 · Red Hat Enterprise Linux AS version 4 Extras · Red Hat Enterprise Linux (v. 5 server) · and others 41
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/10071cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/10579githubgithub.com/johnwchadwick/cve-2009-3555-test-server★ 3vulncheckvulncheck.com/xdb/e36bdaa6a882unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.apple.com/archives/security-announce/2010//May/msg00001.htmlhttp://www.securitytracker.com/id?1023427http://support.avaya.com/css/P8/documents/100081611http://osvdb.org/62210http://secunia.com/advisories/37640http://www.arubanetworks.com/support/alerts/aid-020810.txthttp://www.vupen.com/english/advisories/2010/0916http://support.avaya.com/css/P8/documents/100114327http://www.redhat.com/support/errata/RHSA-2010-0167.htmlhttp://www.vupen.com/english/advisories/2010/2010https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.htmlhttp://www.vupen.com/english/advisories/2010/0086