CVE-2009-3555
- State
- Published
- Severity
- 9.8 Critical
- Published
- Nov 9, 2009
- Updated
- May 27, 2026
- Reserved
- Oct 5, 2009
Description
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-300 Channel Accessible by Non-Endpoint
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- APPLE-SA-2010-05-18-1vendor-advisory
- 1023427vdb-entry
- http://support.avaya.com/css/P8/documents/100081611
- 62210vdb-entry
- 37640third-party-advisory
- http://www.arubanetworks.com/support/alerts/aid-020810.txt
- ADV-2010-0916vdb-entry
- http://support.avaya.com/css/P8/documents/100114327
- RHSA-2010:0167vendor-advisory
- ADV-2010-2010vdb-entry
- FEDORA-2009-12750vendor-advisory
- ADV-2010-0086vdb-entry
- ADV-2010-1673vdb-entry
- [tls] 20091104 TLS renegotiation issuemailing-list
- 37656third-party-advisory
- RHSA-2010:0865vendor-advisory
- 39628third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
- 42724third-party-advisory
- ADV-2009-3310vdb-entry
- ADV-2009-3205vdb-entry
- http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during
- 39461third-party-advisory
- http://support.avaya.com/css/P8/documents/100114315
- http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c
- GLSA-201406-32vendor-advisory
- http://www.ingate.com/Relnote.php?ver=481
- 1023204vdb-entry
- 40866third-party-advisory
- HPSBMU02799vendor-advisory
- TA10-222Athird-party-advisory
- 1023211vdb-entry
- SSRT090249vendor-advisory
- 39317third-party-advisory
- 1023212vdb-entry
- SUSE-SA:2010:061vendor-advisory
- 39127third-party-advisory
- 40545third-party-advisory
- ADV-2010-3069vdb-entry
- [4.5] 010: SECURITY FIX: November 26, 2009vendor-advisory
- 1023210vdb-entry
- 1023270vdb-entry
- 40070third-party-advisory
- 1023273vdb-entry
- http://kbase.redhat.com/faq/docs/DOC-20491
- USN-927-5vendor-advisory
- PM12247vendor-advisory
- SUSE-SU-2011:0847vendor-advisory
- MDVSA-2010:089vendor-advisory
- RHSA-2010:0770vendor-advisory
- http://www.openssl.org/news/secadv_20091111.txt
- 1023275vdb-entry
- DSA-3253vendor-advisory
- ADV-2009-3484vdb-entry
- 1023207vdb-entry
- 37859third-party-advisory
- SSRT101846vendor-advisory
- 1021752vendor-advisory
- FEDORA-2010-6131vendor-advisory
- ADV-2010-0848vdb-entry
- [oss-security] 20091107 Re: [TLS] CVE-2009-3555 for TLS renegotiation MITM attacksmailing-list
- 39819third-party-advisory
- IC68055vendor-advisory
- http://www.links.org/?p=786
- 60521vdb-entry
- [oss-security] 20091123 Re: CVEs for nginxmailing-list
- VU#120541third-party-advisory
- 1023217vdb-entry
- RHSA-2010:0768vendor-advisory
- ADV-2009-3353vdb-entry
- FEDORA-2010-5357vendor-advisory
- 39136third-party-advisory
- http://www.openoffice.org/security/cves/CVE-2009-3555.html
- ADV-2011-0032vdb-entry
- 1023148vdb-entry
- openSUSE-SU-2011:0845vendor-advisory
- 36935vdb-entry
- http://www.tombom.co.uk/blog/?p=85
- SSRT090208vendor-advisory
- ADV-2010-1107vdb-entry
- 1023218vdb-entry
- ADV-2010-1350vdb-entry
- RHSA-2010:0338vendor-advisory
- 42379third-party-advisory
- FEDORA-2009-12775vendor-advisory
- 20091109 Transport Layer Security Renegotiation Vulnerabilityvendor-advisory
- IC67848vendor-advisory
- 1023213vdb-entry
- FEDORA-2010-16240vendor-advisory
- ADV-2010-1793vdb-entry
- oval:org.mitre.oval:def:11617vdb-entrysignature
- http://extendedsubset.com/?p=8
- 37292third-party-advisory
- SSRT100817vendor-advisory
- tls-renegotiation-weak-security(54158)vdb-entry
- APPLE-SA-2010-05-18-2vendor-advisory
- 39278third-party-advisory
- 1023205vdb-entry
- RHSA-2010:0130vendor-advisory
- http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html
- http://support.apple.com/kb/HT4004
- 1023215vdb-entry
- USN-1010-1vendor-advisory
- 1023206vdb-entry
- SUSE-SR:2010:011vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
- GLSA-200912-01vendor-advisory
- SSRT090180vendor-advisory
- ADV-2009-3313vdb-entry
- 274990vendor-advisory
- 1023208vdb-entry
- 43308third-party-advisory
- 1023214vdb-entry
- SUSE-SA:2009:057vendor-advisory
- 38781third-party-advisory
- HPSBOV02762vendor-advisory
- DSA-1934vendor-advisory
- FEDORA-2009-12782vendor-advisory
- oval:org.mitre.oval:def:7478vdb-entrysignature
- 1023271vdb-entry
- APPLE-SA-2010-01-19-1vendor-advisory
- [cryptography] 20091105 OpenSSL 0.9.8l releasedmailing-list
- 42467third-party-advisory
- 20091130 TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability)mailing-list
- oval:org.mitre.oval:def:7315vdb-entrysignature
- 1023224vdb-entry
- SUSE-SR:2010:013vendor-advisory
- USN-927-4vendor-advisory
- 41490third-party-advisory
- 20091124 rPSA-2009-0155-1 httpd mod_sslmailing-list
- 1023243vdb-entry
- http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html
- 37504third-party-advisory
- 1023219vdb-entry
- http://sysoev.ru/nginx/patch.cve-2009-3555.txt
- http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html
- 1023163vdb-entry
- HPSBHF02706vendor-advisory
- ADV-2009-3521vdb-entry
- oval:org.mitre.oval:def:7973vdb-entrysignature
- HPSBMA02568vendor-advisory
- http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released
- https://bugzilla.redhat.com/show_bug.cgi?id=533125
- oval:org.mitre.oval:def:10088vdb-entrysignature
- 44183third-party-advisory
- http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
- 42808third-party-advisory
- 39500third-party-advisory
- oval:org.mitre.oval:def:11578vdb-entrysignature
- http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
- ADV-2009-3220vdb-entry
- SSRT100179vendor-advisory
- SSRT100089vendor-advisory
- RHSA-2010:0165vendor-advisory
- 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Consolemailing-list
- RHSA-2010:0987vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=545755
- http://www-01.ibm.com/support/docview.wss?uid=swg21426108
- http://blogs.iss.net/archive/sslmitmiscsrf.html
- 1023411vdb-entry
- RHSA-2010:0339vendor-advisory
- RHSA-2010:0986vendor-advisory
- ADV-2009-3164vdb-entry
- 37383third-party-advisory
- FEDORA-2009-12229vendor-advisory
- 44954third-party-advisory
- [tls] 20091104 MITM attack on delayed TLS-client auth through renegotiationmailing-list
- http://support.avaya.com/css/P8/documents/100070150
- 40747third-party-advisory
- HPSBUX02498vendor-advisory
- 39292third-party-advisory
- 42816third-party-advisory
- IC68054vendor-advisory
- 273029vendor-advisory
- FEDORA-2009-12604vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21432298
- http://extendedsubset.com/Renegotiating_TLS.pdf
- http://www-01.ibm.com/support/docview.wss?uid=swg24025312
- http://www-01.ibm.com/support/docview.wss?uid=swg24006386
- http://support.apple.com/kb/HT4170
- 20091118 TLS / SSLv3 vulnerability explained (DRAFT)mailing-list
- 1023209vdb-entry
- PM00675vendor-advisory
- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
- 48577third-party-advisory
- SSA:2009-320-01vendor-advisory
- http://www.links.org/?p=789
- http://www.opera.com/docs/changelogs/unix/1060/
- http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html
- RHSA-2011:0880vendor-advisory
- SUSE-SR:2010:008vendor-advisory
- http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
- [oss-security] 20091107 Re: CVE-2009-3555 for TLS renegotiation MITM attacksmailing-list
- FEDORA-2009-12305vendor-advisory
- http://wiki.rpath.com/Advisories:rPSA-2009-0155
- SUSE-SR:2010:012vendor-advisory
- http://support.citrix.com/article/CTX123359
- 37501third-party-advisory
- MDVSA-2010:076vendor-advisory
- HPSBUX02517vendor-advisory
- ADV-2009-3587vdb-entry
- 39632third-party-advisory
- 38687third-party-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=526689
- MS10-049vendor-advisory
- ADV-2010-0982vdb-entry
- 37399third-party-advisory
- USN-927-1vendor-advisory
- 1023272vdb-entry
- FEDORA-2009-12606vendor-advisory
- ADV-2010-3126vdb-entry
- 37320third-party-advisory
- ADV-2009-3165vdb-entry
- ADV-2010-1639vdb-entry
- 38020third-party-advisory
- USN-923-1vendor-advisory
- 39243third-party-advisory
- oval:org.mitre.oval:def:8366vdb-entrysignature
- 37453third-party-advisory
- http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
- ADV-2010-0933vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- 41972third-party-advisory
- ADV-2010-3086vdb-entry
- DSA-2141vendor-advisory
- 1024789vdb-entry
- RHSA-2010:0155vendor-advisory
- http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html
- ADV-2011-0033vdb-entry
- RHSA-2010:0337vendor-advisory
- 1023216vdb-entry
- 41480third-party-advisory
- ADV-2011-0086vdb-entry
- 41818third-party-advisory
- 37604third-party-advisory
- http://www.opera.com/support/search/view/944/
- [announce] 20091107 CVE-2009-3555 - apache/mod_ssl vulnerability and mitigationmailing-list
- SUSE-SR:2010:024vendor-advisory
- TA10-287Athird-party-advisory
- http://www.links.org/?p=780
- RHSA-2010:0119vendor-advisory
- 38056third-party-advisory
- ADV-2010-0748vdb-entry
- 37675third-party-advisory
- oval:org.mitre.oval:def:8535vdb-entrysignature
- http://www.vmware.com/security/advisories/VMSA-2010-0019.html
- RHSA-2010:0786vendor-advisory
- https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt
- 38003third-party-advisory
- http://support.apple.com/kb/HT4171
- 1023428vdb-entry
- [oss-security] 20091120 CVEs for nginxmailing-list
- ADV-2009-3354vdb-entry
- 1023274vdb-entry
- FEDORA-2009-12968vendor-advisory
- 39242third-party-advisory
- https://kb.bluecoat.com/index?page=content&id=SA50
- 38241third-party-advisory
- 42377third-party-advisory
- GLSA-201203-22vendor-advisory
- [oss-security] 20091105 CVE-2009-3555 for TLS renegotiation MITM attacksmailing-list
- SUSE-SR:2010:019vendor-advisory
- 60972vdb-entry
- 1023426vdb-entry
- 38484third-party-advisory
- MDVSA-2010:084vendor-advisory
- http://www.betanews.com/article/1257452450
- 1021653vendor-advisory
- http://www.mozilla.org/security/announce/2010/mfsa2010-22.html
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESXmailing-list
- [4.6] 004: SECURITY FIX: November 26, 2009vendor-advisory
- 41967third-party-advisory
- RHSA-2010:0807vendor-advisory
- ADV-2010-1191vdb-entry
- 20091111 Re: SSL/TLS MiTM PoCmailing-list
- https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html
- [oss-security] 20091105 Re: CVE-2009-3555 for TLS renegotiation MITM attacksmailing-list
- 39713third-party-advisory
- 42733third-party-advisory
- 37291third-party-advisory
- FEDORA-2010-16312vendor-advisory
- FEDORA-2010-5942vendor-advisory
- ADV-2010-2745vdb-entry
- 273350vendor-advisory
- ADV-2010-0994vdb-entry
- ADV-2010-0173vdb-entry
- ADV-2010-1054vdb-entry
- 65202vdb-entry
- HPSBGN02562vendor-advisory
- FEDORA-2010-16294vendor-advisory
- [gnutls-devel] 20091105 Re: TLS renegotiation MITMmailing-list
- 20131121 ESA-2013-077: RSA Data Protection Manager Appliance Multiple Vulnerabilitiesmailing-list
- http://clicky.me/tlsvuln
- 42811third-party-advisory
- [tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/mailing-list
- [tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [31/34] - /tomcat/site/trunk/docs/mailing-list
- https://www.exploit-db.com/exploits/10579exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.