[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-DEBIAN-CVE-2009-3555":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":16,"duplicates":29,"related":30,"reserved_at":9,"published_at":31,"modified_at":32,"state":9,"summary":33,"references_raw":35,"kevs":42,"epss":9,"epss_history":43,"metrics":44,"affected":50},"DEBIAN-CVE-2009-3555","The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.",null,[],[],[],[14],{"_key":15},"CVE-2009-3555",[17,19,21,23,25,27],{"_key":18},"DLA-400-1",{"_key":20},"DSA-1934-1",{"_key":22},"DSA-2141-1",{"_key":24},"DSA-2141-2",{"_key":26},"DSA-2626-1",{"_key":28},"DSA-3253-1",[],[],"2009-11-09T17:30:00.407Z","2026-05-28T09:00:09.037936489Z",{"cisa_kev":34,"cisa_ransomware":34,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[36],{"url":37,"sources":38,"tags":40},"https://security-tracker.debian.org/tracker/CVE-2009-3555",[39],"osv_debian",[41],"Advisory",[],[],[45],{"source":39,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":46,"cvss_v4_0":9},{"baseScore":47,"baseSeverity":9,"vectorString":48,"impactScore":47,"exploitabilityScore":49},9.8,"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",10,[51,66,75,84,93,102,110],{"ecosystem":52,"name":53,"vendor":54,"product":53,"cpe_part":9,"purl_type":55,"purl_namespace":54,"purl_name":53,"source":9,"versions":56},"Debian","apache2","debian","deb",[57,63,64,65],{"version":58,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":61,"version_end_type":62,"fixed_in":9},"lt2_2_14_2",true,"ecosystem","2.2.14-2","excluding",{"version":58,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":61,"version_end_type":62,"fixed_in":9},{"version":58,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":61,"version_end_type":62,"fixed_in":9},{"version":58,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":61,"version_end_type":62,"fixed_in":9},{"ecosystem":52,"name":67,"vendor":54,"product":67,"cpe_part":9,"purl_type":55,"purl_namespace":54,"purl_name":67,"source":9,"versions":68},"lighttpd",[69,72,73,74],{"version":70,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":71,"version_end_type":62,"fixed_in":9},"lt1_4_30_1","1.4.30-1",{"version":70,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":71,"version_end_type":62,"fixed_in":9},{"version":70,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":71,"version_end_type":62,"fixed_in":9},{"version":70,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":71,"version_end_type":62,"fixed_in":9},{"ecosystem":52,"name":76,"vendor":54,"product":76,"cpe_part":9,"purl_type":55,"purl_namespace":54,"purl_name":76,"source":9,"versions":77},"nginx",[78,81,82,83],{"version":79,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":80,"version_end_type":62,"fixed_in":9},"lt0_7_64_1","0.7.64-1",{"version":79,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":80,"version_end_type":62,"fixed_in":9},{"version":79,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":80,"version_end_type":62,"fixed_in":9},{"version":79,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":80,"version_end_type":62,"fixed_in":9},{"ecosystem":52,"name":85,"vendor":54,"product":85,"cpe_part":9,"purl_type":55,"purl_namespace":54,"purl_name":85,"source":9,"versions":86},"nss",[87,90,91,92],{"version":88,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":89,"version_end_type":62,"fixed_in":9},"lt3_12_6_1","3.12.6-1",{"version":88,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":89,"version_end_type":62,"fixed_in":9},{"version":88,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":89,"version_end_type":62,"fixed_in":9},{"version":88,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":89,"version_end_type":62,"fixed_in":9},{"ecosystem":52,"name":94,"vendor":54,"product":94,"cpe_part":9,"purl_type":55,"purl_namespace":54,"purl_name":94,"source":9,"versions":95},"openssl",[96,99,100,101],{"version":97,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":98,"version_end_type":62,"fixed_in":9},"lt0_9_8k_6","0.9.8k-6",{"version":97,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":98,"version_end_type":62,"fixed_in":9},{"version":97,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":98,"version_end_type":62,"fixed_in":9},{"version":97,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":98,"version_end_type":62,"fixed_in":9},{"ecosystem":52,"name":103,"vendor":54,"product":103,"cpe_part":9,"purl_type":55,"purl_namespace":54,"purl_name":103,"source":9,"versions":104},"pound",[105,108,109],{"version":106,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":107,"version_end_type":62,"fixed_in":9},"lt2_6_6_1","2.6-6.1",{"version":106,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":107,"version_end_type":62,"fixed_in":9},{"version":106,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":107,"version_end_type":62,"fixed_in":9},{"ecosystem":52,"name":111,"vendor":54,"product":111,"cpe_part":9,"purl_type":55,"purl_namespace":54,"purl_name":111,"source":9,"versions":112},"tomcat-native",[113,116,117,118],{"version":114,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":115,"version_end_type":62,"fixed_in":9},"lt1_1_18_1","1.1.18-1",{"version":114,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":115,"version_end_type":62,"fixed_in":9},{"version":114,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":115,"version_end_type":62,"fixed_in":9},{"version":114,"is_range":59,"range_type":60,"version_start":9,"version_start_type":9,"version_end":115,"version_end_type":62,"fixed_in":9}]