CVE-2009-3585: CVE-2009-3585

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-3585

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages a second web server within the same domain.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Best Practical Solutions RT html/Elements/Setup会话Cookie会话劫持漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Best Practical Solutions RT 3.0.0 到3.6.9版本以及3.8.x到3.8.5版本中的html/Elements/Setup会话Cookie存在会话劫持漏洞，使远程攻击者可以借助在同一域平衡一个第二网络服务器设置会话识别标来攻击网络会话。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2009-3585

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2009-3585

Please Login to view more intelligence information

http://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patchx_refsource_CONFIRM
http://bestpractical.typepad.com/files/rt-3.6.2-3.6.3-session_fixation.v3.patchx_refsource_CONFIRM
http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patchx_refsource_CONFIRM
http://bestpractical.typepad.com/files/rt-3.8-session_fixation.patchx_refsource_CONFIRM
http://bestpractical.typepad.com/files/rt-3.6.4-3.6.9-session_fixation.v2.patchx_refsource_CONFIRM
http://blog.bestpractical.com/2009/11/session-fixation-vulnerability.htmlx_refsource_CONFIRM
http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patchx_refsource_CONFIRM
http://secunia.com/advisories/37546third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/37728third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/37162vdb-entryx_refsource_BID
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00832.htmlvendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00761.htmlvendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00794.htmlvendor-advisoryx_refsource_FEDORA
https://exchange.xforce.ibmcloud.com/vulnerabilities/54472vdb-entryx_refsource_XF
http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000177.htmlmailing-listx_refsource_MLIST
http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000176.htmlmailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2009-3585

New Vulnerabilities

Product: n/a

Vendor: n/a

V. Comments for CVE-2009-3585

No comments yet

Support Us — Your donation helps us keep running

I. Basic Information for CVE-2009-3585

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2009-3585

III. Intelligence Information for CVE-2009-3585

New Vulnerabilities

V. Comments for CVE-2009-3585

Leave a comment