Skip to content
OpenAdvisories
Critical RHSA-2009:1579 3 CVEs

Red Hat Security Advisory: httpd security update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as httpd 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::as httpd-debuginfo 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::as httpd-devel 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::as mod_ssl 1:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop httpd 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop httpd-debuginfo 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop httpd-devel 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop mod_ssl 1:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::es httpd 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::es httpd-debuginfo 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::es httpd-devel 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::es mod_ssl 1:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::ws httpd 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::ws httpd-debuginfo 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::ws httpd-devel 0:2.0.46-77.ent
Red Hat · RHEL 3 enterprise_linux:3::ws mod_ssl 1:2.0.46-77.ent
Red Hat · RHEL 5 enterprise_linux:5::client httpd 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::client httpd-debuginfo 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::client mod_ssl 1:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd-debuginfo 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd-devel 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd-manual 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::server httpd 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::server httpd-debuginfo 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::server httpd-devel 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::server httpd-manual 0:2.2.3-31.el5_4.2
Red Hat · RHEL 5 enterprise_linux:5::server mod_ssl 1:2.2.3-31.el5_4.2

Vulnerabilities 3

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Unscored —
    CVE-2009-3094

    The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.…

    apache2 Debian
  • Unscored —
    CVE-2009-3095 EPSS 14%

    The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and s…

    apache2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://kbase.redhat.com/faq/docs/DOC-20491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=522209
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533125
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1579.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3094
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3094
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3094
  • report
    https://access.redhat.com/security/cve/CVE-2009-3095
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3095
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3095
  • report
    https://access.redhat.com/security/cve/CVE-2009-3555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3555