{"cve":"CVE-2009-3555","nvd":{"published":"2009-11-09T17:30:00.407","modified":"2026-06-16T23:11:50.227","status":"Modified","description":"The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-295","CWE-300"],"references":["http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html","http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html","http://blogs.iss.net/archive/sslmitmiscsrf.html","http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during","http://clicky.me/tlsvuln"],"products":["apache:http_server","canonical:ubuntu_linux","debian:debian_linux","f5:nginx","fedoraproject:fedora","gnu:gnutls","mozilla:nss","openssl:openssl"],"source":"nvd","synced_at":"2026-10-19T19:54:26.868835795+00:00"},"epss":{"cve":"CVE-2009-3555","score":0.87264,"percentile":0.99751,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-f7w7-6pjc-wwm6","url":"https://osv.dev/vulnerability/GHSA-f7w7-6pjc-wwm6","summary":"Apache Tomcat affected by vulnerability in TLS and SSL protocol","modified":"2026-06-09T00:00:21.005614952Z","packages":[{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat","purl":"pkg:maven/org.apache.tomcat/tomcat","ranges":[">=7.0.0 <7.0.10"],"fixed":["7.0.10"]},{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat","purl":"pkg:maven/org.apache.tomcat/tomcat","ranges":[">=6.0.0 <6.0.32"],"fixed":["6.0.32"]},{"ecosystem":"Maven","name":"org.apache.tomcat:tomcat","purl":"pkg:maven/org.apache.tomcat/tomcat","ranges":[">=5.0.0 <5.5.33"],"fixed":["5.5.33"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}