AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-3094

LOW · CVSS 2.6 EPSS 8.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-09-08 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 2.6. It affects Apache. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2009-3094
Severity
LOW
CVSS
2.6
EPSS
8.57%
Apache

Original NVD Description

The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.