CVE-2009-3639

published 2009-10-28

CVE-2009-3639: The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0'…

Priority P3 35 medium 5.8 CVSS 2.0

AV N AC M Au N C N I P A P

The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended client-hostname restrictions via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	proftpd-dfsg	< proftpd-dfsg 1.3.2a-2 (bookworm)	proftpd-dfsg 1.3.2a-2 (bookworm)
proftpd	proftpd	<= 1.3.2	—
proftpd	proftpd	—	—
proftpd	proftpd	—	—
proftpd	proftpd	—	—

CVSS provenance

nvd v2.0 5.8 MEDIUM AV:N/AC:M/Au:N/C:N/I:P/A:P

osv 5.9 MEDIUM

vendor_debian 5.9 LOW

vendor_redhat 5.9 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.