peter bassill · operator
$ cve CVE-2009-3555 JSON

CVE-2009-3555 EXPLOIT

9.8
CRITICAL · CVSS 3.1 · EPSS 87.3% (pctl 100)

Patch early

A public exploit exists.

Description

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS87.26% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-295
On CISA KEVno
Public exploityes
Published2009-11-09
Last modified2026-06-16

Affected (8)

VendorProduct
apachehttp server
canonicalubuntu linux
debiandebian linux
f5nginx
fedoraprojectfedora
gnugnutls
mozillanss
opensslopenssl

Public exploits

SourceTitleDate
exploit-dbTLS - Renegotiation2009-12-21
exploit-dbMozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass2009-11-10

References

→ the Explorer  ·  watch your stack  ·  NVD