CVE-2009-3555

Catégories

Authorization problems

OWSAP

A07-Identif. and Authent. Fail

EPSS

3.08%V4

Vecteur

Network

Publié

2009-11-09
16h00 +00:00

Modifié

2020-02-13
15h08 +00:00

Liens officiels

CVE.org

NVD

Notifications pour un CVE

Restez informé de toutes modifications pour un CVE spécifique.

Gestion des notifications

Alertes personnalisées

Activez vos alertes personnalisées !

Pour activer vos alertes, vous devez simplement être connecté à votre compte gratuit. Si vous n’êtes pas encore connecté, choisissez l’une des options ci-dessous.

Se connecter à votre compte Créer un compte Gratuit

Notifications pour un CVE

Restez informé de toutes modifications pour un CVE spécifique.

Critères appliqués l'envoi de l'alerte : par rapport à la dernière alerte envoyée + différences au niveau de CISA, EPSS, CVSS, CWE, Solutions, CPE.

Paramètres

Vous pouvez spécifier un titre qui sera récupéré dans les alertes qui seront envoyées.

Spécifiez ici un CVE ID comme CVE-2025-1234

Planifications

Mois

Prochaine exécution calculée

Jour

Jour de la semaine

Heure

Minute

Date de création

Dernière exécution

Prochaine exécution

Descriptions du CVE

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.

Informations du CVE

Faiblesses connexes

CWE-ID	Nom de la faiblesse	Source
CWE-295	Improper Certificate Validation The product does not validate, or incorrectly validates, a certificate.

Métriques

Métriques	Score	Gravité	CVSS Vecteur	Source
V2	5.8		AV:N/AC:M/Au:N/C:N/I:P/A:P	nvd@nist.gov

EPSS

EPSS est un modèle de notation qui prédit la probabilité qu'une vulnérabilité soit exploitée.

Score EPSS

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Percentile EPSS

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

EPSS First.org

Informations sur l'Exploit

Exploit Database EDB-ID : 10071

Date de publication : 2009-11-09 23h00 +00:00
Auteur : Dan Kaminsky
EDB Vérifié : Yes

Exploit Database EDB-ID : 10579

Date de publication : 2009-12-20 23h00 +00:00
Auteur : RedTeam Pentesting
EDB Vérifié : Yes

Products Mentioned

Configuraton 0

Apache>>Http_server >> Version To (including) 2.2.14

Gnu>>Gnutls >> Version To (including) 2.8.5

Mozilla>>Nss >> Version To (including) 3.12.4

Openssl>>Openssl >> Version To (including) 0.9.8k

Openssl>>Openssl >> Version 1.0

Configuraton 0

Canonical>>Ubuntu_linux >> Version 8.04

Canonical>>Ubuntu_linux >> Version 8.10

Canonical>>Ubuntu_linux >> Version 9.04

Canonical>>Ubuntu_linux >> Version 9.10

Canonical>>Ubuntu_linux >> Version 10.04

Canonical>>Ubuntu_linux >> Version 10.10

Debian>>Debian_linux >> Version 4.0

Debian>>Debian_linux >> Version 5.0

Debian>>Debian_linux >> Version 6.0

Debian>>Debian_linux >> Version 7.0

Debian>>Debian_linux >> Version 8.0

Fedoraproject>>Fedora >> Version 11

Fedoraproject>>Fedora >> Version 12

Fedoraproject>>Fedora >> Version 13

Fedoraproject>>Fedora >> Version 14

Configuraton 0

F5>>Nginx >> Version From (including) 0.1.0 To (including) 0.8.22

Références

http://lists.apple.com/archives/security-announce/2010//May/msg00001.html
Tags : vendor-advisory, x_refsource_APPLE

http://www.securitytracker.com/id?1023427
Tags : vdb-entry, x_refsource_SECTRACK

http://support.avaya.com/css/P8/documents/100081611
Tags : x_refsource_CONFIRM

http://osvdb.org/62210
Tags : vdb-entry, x_refsource_OSVDB

http://secunia.com/advisories/37640
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.arubanetworks.com/support/alerts/aid-020810.txt
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2010/0916
Tags : vdb-entry, x_refsource_VUPEN

http://support.avaya.com/css/P8/documents/100114327
Tags : x_refsource_CONFIRM

http://www.redhat.com/support/errata/RHSA-2010-0167.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.vupen.com/english/advisories/2010/2010
Tags : vdb-entry, x_refsource_VUPEN

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.vupen.com/english/advisories/2010/0086
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2010/1673
Tags : vdb-entry, x_refsource_VUPEN

http://www.ietf.org/mail-archive/web/tls/current/msg03948.html
Tags : mailing-list, x_refsource_MLIST

http://secunia.com/advisories/37656
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2010-0865.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/39628
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/42724
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2009/3310
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2009/3205
Tags : vdb-entry, x_refsource_VUPEN

http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/39461
Tags : third-party-advisory, x_refsource_SECUNIA

http://support.avaya.com/css/P8/documents/100114315
Tags : x_refsource_CONFIRM

http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c
Tags : x_refsource_CONFIRM

http://security.gentoo.org/glsa/glsa-201406-32.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://www.ingate.com/Relnote.php?ver=481
Tags : x_refsource_CONFIRM

http://www.securitytracker.com/id?1023204
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/40866
Tags : third-party-advisory, x_refsource_SECUNIA

http://marc.info/?l=bugtraq&m=134254866602253&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.us-cert.gov/cas/techalerts/TA10-222A.html
Tags : third-party-advisory, x_refsource_CERT

http://www.securitytracker.com/id?1023211
Tags : vdb-entry, x_refsource_SECTRACK

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/39317
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1023212
Tags : vdb-entry, x_refsource_SECTRACK

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/39127
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/40545
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2010/3069
Tags : vdb-entry, x_refsource_VUPEN

http://openbsd.org/errata45.html#010_openssl
Tags : vendor-advisory, x_refsource_OPENBSD

http://www.securitytracker.com/id?1023210
Tags : vdb-entry, x_refsource_SECTRACK

http://www.securitytracker.com/id?1023270
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/40070
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1023273
Tags : vdb-entry, x_refsource_SECTRACK

http://kbase.redhat.com/faq/docs/DOC-20491
Tags : x_refsource_CONFIRM

http://www.ubuntu.com/usn/USN-927-5
Tags : vendor-advisory, x_refsource_UBUNTU

http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247
Tags : vendor-advisory, x_refsource_AIXAPAR

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.mandriva.com/security/advisories?name=MDVSA-2010:089
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.redhat.com/support/errata/RHSA-2010-0770.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.openssl.org/news/secadv_20091111.txt
Tags : x_refsource_CONFIRM

http://www.securitytracker.com/id?1023275
Tags : vdb-entry, x_refsource_SECTRACK

http://www.debian.org/security/2015/dsa-3253
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.vupen.com/english/advisories/2009/3484
Tags : vdb-entry, x_refsource_VUPEN

http://www.securitytracker.com/id?1023207
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/37859
Tags : third-party-advisory, x_refsource_SECUNIA

http://marc.info/?l=bugtraq&m=142660345230545&w=2
Tags : vendor-advisory, x_refsource_HP

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021752.1-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.vupen.com/english/advisories/2010/0848
Tags : vdb-entry, x_refsource_VUPEN

http://www.openwall.com/lists/oss-security/2009/11/07/3
Tags : mailing-list, x_refsource_MLIST

http://secunia.com/advisories/39819
Tags : third-party-advisory, x_refsource_SECUNIA

http://www-01.ibm.com/support/docview.wss?uid=swg1IC68055
Tags : vendor-advisory, x_refsource_AIXAPAR

http://www.links.org/?p=786
Tags : x_refsource_MISC

http://osvdb.org/60521
Tags : vdb-entry, x_refsource_OSVDB

http://www.openwall.com/lists/oss-security/2009/11/23/10
Tags : mailing-list, x_refsource_MLIST

http://www.kb.cert.org/vuls/id/120541
Tags : third-party-advisory, x_refsource_CERT-VN

http://www.securitytracker.com/id?1023217
Tags : vdb-entry, x_refsource_SECTRACK

http://www.redhat.com/support/errata/RHSA-2010-0768.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.vupen.com/english/advisories/2009/3353
Tags : vdb-entry, x_refsource_VUPEN

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/39136
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.openoffice.org/security/cves/CVE-2009-3555.html
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2011/0032
Tags : vdb-entry, x_refsource_VUPEN

http://securitytracker.com/id?1023148
Tags : vdb-entry, x_refsource_SECTRACK

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.securityfocus.com/bid/36935
Tags : vdb-entry, x_refsource_BID

http://www.tombom.co.uk/blog/?p=85
Tags : x_refsource_MISC

http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.vupen.com/english/advisories/2010/1107
Tags : vdb-entry, x_refsource_VUPEN

http://www.securitytracker.com/id?1023218
Tags : vdb-entry, x_refsource_SECTRACK

http://www.vupen.com/english/advisories/2010/1350
Tags : vdb-entry, x_refsource_VUPEN

http://www.redhat.com/support/errata/RHSA-2010-0338.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/42379
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b01d1d.shtml
Tags : vendor-advisory, x_refsource_CISCO

http://www-01.ibm.com/support/docview.wss?uid=swg1IC67848
Tags : vendor-advisory, x_refsource_AIXAPAR

http://www.securitytracker.com/id?1023213
Tags : vdb-entry, x_refsource_SECTRACK

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.vupen.com/english/advisories/2010/1793
Tags : vdb-entry, x_refsource_VUPEN

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11617
Tags : vdb-entry, signature, x_refsource_OVAL

http://extendedsubset.com/?p=8
Tags : x_refsource_MISC

http://secunia.com/advisories/37292
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/522176
Tags : vendor-advisory, x_refsource_HP

https://exchange.xforce.ibmcloud.com/vulnerabilities/54158
Tags : vdb-entry, x_refsource_XF

http://lists.apple.com/archives/security-announce/2010//May/msg00002.html
Tags : vendor-advisory, x_refsource_APPLE

http://secunia.com/advisories/39278
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1023205
Tags : vdb-entry, x_refsource_SECTRACK

http://www.redhat.com/support/errata/RHSA-2010-0130.html
Tags : vendor-advisory, x_refsource_REDHAT

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=142660345230545&w=2
Tags : vendor-advisory, x_refsource_HP

http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html
Tags : x_refsource_CONFIRM

http://support.apple.com/kb/HT4004
Tags : x_refsource_CONFIRM

http://www.securitytracker.com/id?1023215
Tags : vdb-entry, x_refsource_SECTRACK

http://www.ubuntu.com/usn/USN-1010-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.securitytracker.com/id?1023206
Tags : vdb-entry, x_refsource_SECTRACK

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
Tags : x_refsource_CONFIRM

http://security.gentoo.org/glsa/glsa-200912-01.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://marc.info/?l=bugtraq&m=127419602507642&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.vupen.com/english/advisories/2009/3313
Tags : vdb-entry, x_refsource_VUPEN

http://sunsolve.sun.com/search/document.do?assetkey=1-66-274990-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.securitytracker.com/id?1023208
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/43308
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1023214
Tags : vdb-entry, x_refsource_SECTRACK

http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/38781
Tags : third-party-advisory, x_refsource_SECUNIA

http://marc.info/?l=bugtraq&m=133469267822771&w=2
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=127419602507642&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.debian.org/security/2009/dsa-1934
Tags : vendor-advisory, x_refsource_DEBIAN

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html
Tags : vendor-advisory, x_refsource_FEDORA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7478
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.securitytracker.com/id?1023271
Tags : vdb-entry, x_refsource_SECTRACK

http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html
Tags : vendor-advisory, x_refsource_APPLE

http://marc.info/?l=cryptography&m=125752275331877&w=2
Tags : mailing-list, x_refsource_MLIST

http://secunia.com/advisories/42467
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/508130/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7315
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.securitytracker.com/id?1023224
Tags : vdb-entry, x_refsource_SECTRACK

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.ubuntu.com/usn/USN-927-4
Tags : vendor-advisory, x_refsource_UBUNTU

http://secunia.com/advisories/41490
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/508075/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.securitytracker.com/id?1023243
Tags : vdb-entry, x_refsource_SECTRACK

http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html
Tags : x_refsource_MISC

http://secunia.com/advisories/37504
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1023219
Tags : vdb-entry, x_refsource_SECTRACK

http://sysoev.ru/nginx/patch.cve-2009-3555.txt
Tags : x_refsource_CONFIRM

http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html
Tags : x_refsource_MISC

http://www.securitytracker.com/id?1023163
Tags : vdb-entry, x_refsource_SECTRACK

http://marc.info/?l=bugtraq&m=132077688910227&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.vupen.com/english/advisories/2009/3521
Tags : vdb-entry, x_refsource_VUPEN

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7973
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995
Tags : vendor-advisory, x_refsource_HP

http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released
Tags : x_refsource_CONFIRM

https://bugzilla.redhat.com/show_bug.cgi?id=533125
Tags : x_refsource_CONFIRM

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10088
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/44183
Tags : third-party-advisory, x_refsource_SECUNIA

http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/42808
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/39500
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11578
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2009/3220
Tags : vdb-entry, x_refsource_VUPEN

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=127557596201693&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.redhat.com/support/errata/RHSA-2010-0165.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.securityfocus.com/archive/1/515055/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.redhat.com/support/errata/RHSA-2010-0987.html
Tags : vendor-advisory, x_refsource_REDHAT

https://bugzilla.mozilla.org/show_bug.cgi?id=545755
Tags : x_refsource_CONFIRM

http://www-01.ibm.com/support/docview.wss?uid=swg21426108
Tags : x_refsource_CONFIRM

http://blogs.iss.net/archive/sslmitmiscsrf.html
Tags : x_refsource_MISC

http://www.securitytracker.com/id?1023411
Tags : vdb-entry, x_refsource_SECTRACK

http://www.redhat.com/support/errata/RHSA-2010-0339.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.redhat.com/support/errata/RHSA-2010-0986.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.vupen.com/english/advisories/2009/3164
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/37383
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01029.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/44954
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ietf.org/mail-archive/web/tls/current/msg03928.html
Tags : mailing-list, x_refsource_MLIST

http://marc.info/?l=bugtraq&m=127557596201693&w=2
Tags : vendor-advisory, x_refsource_HP

http://support.avaya.com/css/P8/documents/100070150
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/40747
Tags : third-party-advisory, x_refsource_SECUNIA

http://marc.info/?l=bugtraq&m=126150535619567&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.securityfocus.com/archive/1/522176
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/39292
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/42816
Tags : third-party-advisory, x_refsource_SECUNIA

http://www-01.ibm.com/support/docview.wss?uid=swg1IC68054
Tags : vendor-advisory, x_refsource_AIXAPAR

http://sunsolve.sun.com/search/document.do?assetkey=1-66-273029-1
Tags : vendor-advisory, x_refsource_SUNALERT

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www-01.ibm.com/support/docview.wss?uid=swg21432298
Tags : x_refsource_CONFIRM

http://extendedsubset.com/Renegotiating_TLS.pdf
Tags : x_refsource_MISC

http://www-01.ibm.com/support/docview.wss?uid=swg24025312
Tags : x_refsource_CONFIRM

http://www-01.ibm.com/support/docview.wss?uid=swg24006386
Tags : x_refsource_CONFIRM

http://support.apple.com/kb/HT4170
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/archive/1/507952/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.securitytracker.com/id?1023209
Tags : vdb-entry, x_refsource_SECTRACK

http://www-1.ibm.com/support/search.wss?rs=0&q=PM00675&apar=only
Tags : vendor-advisory, x_refsource_AIXAPAR

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/48577
Tags : third-party-advisory, x_refsource_SECUNIA

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.597446
Tags : vendor-advisory, x_refsource_SLACKWARE

http://www.links.org/?p=789
Tags : x_refsource_MISC

http://www.opera.com/docs/changelogs/unix/1060/
Tags : x_refsource_CONFIRM

http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html
Tags : x_refsource_MISC

http://www.redhat.com/support/errata/RHSA-2011-0880.html
Tags : vendor-advisory, x_refsource_REDHAT

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
Tags : x_refsource_CONFIRM

http://www.openwall.com/lists/oss-security/2009/11/06/3
Tags : mailing-list, x_refsource_MLIST

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01020.html
Tags : vendor-advisory, x_refsource_FEDORA

http://wiki.rpath.com/Advisories:rPSA-2009-0155
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
Tags : vendor-advisory, x_refsource_SUSE

http://support.citrix.com/article/CTX123359
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/37501
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDVSA-2010:076
Tags : vendor-advisory, x_refsource_MANDRIVA

http://marc.info/?l=bugtraq&m=127128920008563&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.vupen.com/english/advisories/2009/3587
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/39632
Tags : third-party-advisory, x_refsource_SECUNIA

http://marc.info/?l=bugtraq&m=126150535619567&w=2
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/38687
Tags : third-party-advisory, x_refsource_SECUNIA

https://bugzilla.mozilla.org/show_bug.cgi?id=526689
Tags : x_refsource_MISC

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049
Tags : vendor-advisory, x_refsource_MS

http://www.vupen.com/english/advisories/2010/0982
Tags : vdb-entry, x_refsource_VUPEN

http://marc.info/?l=bugtraq&m=133469267822771&w=2
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/37399
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/USN-927-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.securitytracker.com/id?1023272
Tags : vdb-entry, x_refsource_SECTRACK

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.vupen.com/english/advisories/2010/3126
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/37320
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2009/3165
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2010/1639
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/38020
Tags : third-party-advisory, x_refsource_SECUNIA

http://ubuntu.com/usn/usn-923-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://secunia.com/advisories/39243
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8366
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/37453
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2010/0933
Tags : vdb-entry, x_refsource_VUPEN

http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995
Tags : vendor-advisory, x_refsource_HP

http://www.vmware.com/security/advisories/VMSA-2011-0003.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/41972
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2010/3086
Tags : vdb-entry, x_refsource_VUPEN

http://www.debian.org/security/2011/dsa-2141
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.securitytracker.com/id?1024789
Tags : vdb-entry, x_refsource_SECTRACK

http://www.redhat.com/support/errata/RHSA-2010-0155.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html
Tags : x_refsource_MISC

http://www.vupen.com/english/advisories/2011/0033
Tags : vdb-entry, x_refsource_VUPEN

http://www.redhat.com/support/errata/RHSA-2010-0337.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.securitytracker.com/id?1023216
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/41480
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2011/0086
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/41818
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/37604
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.opera.com/support/search/view/944/
Tags : x_refsource_CONFIRM

http://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2
Tags : mailing-list, x_refsource_MLIST

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.us-cert.gov/cas/techalerts/TA10-287A.html
Tags : third-party-advisory, x_refsource_CERT

http://www.links.org/?p=780
Tags : x_refsource_MISC

http://www.redhat.com/support/errata/RHSA-2010-0119.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/38056
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2010/0748
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/37675
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8535
Tags : vdb-entry, signature, x_refsource_OVAL

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=127128920008563&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.vmware.com/security/advisories/VMSA-2010-0019.html
Tags : x_refsource_CONFIRM

http://www.redhat.com/support/errata/RHSA-2010-0786.html
Tags : vendor-advisory, x_refsource_REDHAT

https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt
Tags : x_refsource_MISC

http://secunia.com/advisories/38003
Tags : third-party-advisory, x_refsource_SECUNIA

http://support.apple.com/kb/HT4171
Tags : x_refsource_CONFIRM

http://www.securitytracker.com/id?1023428
Tags : vdb-entry, x_refsource_SECTRACK

http://marc.info/?l=bugtraq&m=132077688910227&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.openwall.com/lists/oss-security/2009/11/20/1
Tags : mailing-list, x_refsource_MLIST

http://www.vupen.com/english/advisories/2009/3354
Tags : vdb-entry, x_refsource_VUPEN

http://www.securitytracker.com/id?1023274
Tags : vdb-entry, x_refsource_SECTRACK

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00634.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/39242
Tags : third-party-advisory, x_refsource_SECUNIA

https://kb.bluecoat.com/index?page=content&id=SA50
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/38241
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/42377
Tags : third-party-advisory, x_refsource_SECUNIA

http://security.gentoo.org/glsa/glsa-201203-22.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://www.openwall.com/lists/oss-security/2009/11/05/3
Tags : mailing-list, x_refsource_MLIST

http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE

http://osvdb.org/60972
Tags : vdb-entry, x_refsource_OSVDB

http://www.securitytracker.com/id?1023426
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/38484
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDVSA-2010:084
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.betanews.com/article/1257452450
Tags : x_refsource_MISC

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021653.1-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.mozilla.org/security/announce/2010/mfsa2010-22.html
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/archive/1/516397/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://openbsd.org/errata46.html#004_openssl
Tags : vendor-advisory, x_refsource_OPENBSD

http://secunia.com/advisories/41967
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2010-0807.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.vupen.com/english/advisories/2010/1191
Tags : vdb-entry, x_refsource_VUPEN

http://seclists.org/fulldisclosure/2009/Nov/139
Tags : mailing-list, x_refsource_FULLDISC

https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html
Tags : x_refsource_MISC

http://www.openwall.com/lists/oss-security/2009/11/05/5
Tags : mailing-list, x_refsource_MLIST

http://secunia.com/advisories/39713
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/42733
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/37291
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html
Tags : vendor-advisory, x_refsource_FEDORA

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.vupen.com/english/advisories/2010/2745
Tags : vdb-entry, x_refsource_VUPEN

http://sunsolve.sun.com/search/document.do?assetkey=1-26-273350-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.vupen.com/english/advisories/2010/0994
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2010/0173
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2010/1054
Tags : vdb-entry, x_refsource_VUPEN

http://osvdb.org/65202
Tags : vdb-entry, x_refsource_OSVDB

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02436041
Tags : vendor-advisory, x_refsource_HP

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html
Tags : vendor-advisory, x_refsource_FEDORA

http://lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.html
Tags : mailing-list, x_refsource_MLIST

http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html
Tags : mailing-list, x_refsource_BUGTRAQ

http://clicky.me/tlsvuln
Tags : x_refsource_MISC

http://secunia.com/advisories/42811
Tags : third-party-advisory, x_refsource_SECUNIA

https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	68.65%	–	–
2022-07-17	–	–	42.86%	–	–
2022-07-24	–	–	68.65%	–	–
2023-03-12	–	–	–	0.18%	–
2023-04-09	–	–	–	0.25%	–
2023-07-09	–	–	–	0.25%	–
2023-12-31	–	–	–	0.25%	–
2024-01-07	–	–	–	0.25%	–
2024-01-21	–	–	–	0.25%	–
2024-02-11	–	–	–	0.25%	–
2024-06-02	–	–	–	0.25%	–
2024-06-23	–	–	–	0.29%	–
2024-07-14	–	–	–	0.29%	–
2024-08-04	–	–	–	0.36%	–
2024-08-11	–	–	–	0.36%	–
2024-12-22	–	–	–	3.57%	–
2025-01-05	–	–	–	3.57%	–
2025-01-19	–	–	–	3.57%	–
2025-03-18	–	–	–	–	2.66%
2025-03-30	–	–	–	–	2.66%
2025-04-06	–	–	–	–	3.48%
2025-05-01	–	–	–	–	3.87%
2025-05-04	–	–	–	–	3.48%
2025-05-15	–	–	–	–	3.01%
2025-05-31	–	–	–	–	3.48%
2025-06-01	–	–	–	–	4.47%
2025-06-04	–	–	–	–	3.48%
2025-06-06	–	–	–	–	3.94%
2025-06-15	–	–	–	–	4.03%
2025-07-01	–	–	–	–	4.47%
2025-07-04	–	–	–	–	4.03%
2025-07-17	–	–	–	–	4.13%
2025-07-28	–	–	–	–	3.38%
2025-07-30	–	–	–	–	3.23%
2025-08-01	–	–	–	–	2.99%
2025-08-04	–	–	–	–	3.23%
2025-09-16	–	–	–	–	3.31%
2025-09-22	–	–	–	–	3.23%
2025-10-01	–	–	–	–	4.06%
2025-10-04	–	–	–	–	2.84%
2025-10-26	–	–	–	–	3.29%
2025-10-27	–	–	–	–	3.23%
2025-10-28	–	–	–	–	3.29%
2025-11-01	–	–	–	–	4.06%
2025-11-04	–	–	–	–	3.29%
2025-11-18	–	–	–	–	3.29%
2025-11-21	–	–	–	–	3.29%
2025-11-25	–	–	–	–	3.08%
2025-12-01	–	–	–	–	4.06%
2025-12-04	–	–	–	–	3.08%

Date	Percentile
2022-02-06	99%
2022-07-17	98%
2022-07-24	99%
2023-03-12	53%
2023-04-09	61%
2023-07-09	62%
2023-12-31	63%
2024-01-07	62%
2024-01-21	63%
2024-02-11	64%
2024-06-02	65%
2024-06-23	69%
2024-07-14	7%
2024-08-04	72%
2024-08-11	73%
2024-12-22	91%
2025-01-05	92%
2025-01-19	92%
2025-03-18	85%
2025-03-30	84%
2025-04-06	87%
2025-05-01	88%
2025-05-04	87%
2025-05-15	86%
2025-05-31	87%
2025-06-01	89%
2025-06-04	87%
2025-06-06	88%
2025-06-15	88%
2025-07-01	89%
2025-07-04	88%
2025-07-17	88%
2025-07-28	87%
2025-07-30	87%
2025-08-01	86%
2025-08-04	87%
2025-09-16	87%
2025-09-22	87%
2025-10-01	88%
2025-10-04	86%
2025-10-26	87%
2025-10-27	87%
2025-10-28	87%
2025-11-01	88%
2025-11-04	87%
2025-11-18	86%
2025-11-21	87%
2025-11-25	86%
2025-12-01	88%
2025-12-04	86%

CVE-2009-3555 : Détail

CVE-2009-3555

Descriptions du CVE

Informations du CVE

Faiblesses connexes

Métriques

EPSS

Score EPSS

Percentile EPSS

Informations sur l'Exploit

Exploit Database EDB-ID : 10071

Exploit Database EDB-ID : 10579

Products Mentioned

Configuraton 0

Configuraton 0

Configuraton 0

Références