[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fx8QabeoH26JivNft6J9Ux-ILU2ZsJzLYLFx6o4bHIhw":3,"g5a-risk:CVE-2009-3475":147},{"success":4,"data":5,"meta":145},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":57,"references":58,"referencesCount":93,"weaknesses":94,"weaknessesCount":98,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":143,"notableEvents":144},"CVE-2009-3475","What is CVE-2009-3475?","Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validation, does not properly handle a '\\0' character in the subject or subjectAltName fields of a certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.","Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validation, does not properly handle a '\\0' cha...","2009-09-29T23:30:00.25","2026-06-16T23:11:40.72",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.00891,[34,34,34,34,34,34,34],"High",[38,43,46,49,51,54],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"internet2","shibboleth-sp","1.3.1","cpe:2.3:a:internet2:shibboleth-sp:1.3.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"1.3.2","cpe:2.3:a:internet2:shibboleth-sp:1.3.2:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":47,"criteria":48,"vulnerable":4},"1.3f","cpe:2.3:a:internet2:shibboleth-sp:1.3f:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":22,"criteria":50,"vulnerable":4},"cpe:2.3:a:internet2:shibboleth-sp:2.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":52,"criteria":53,"vulnerable":4},"2.1","cpe:2.3:a:internet2:shibboleth-sp:2.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":55,"criteria":56,"vulnerable":4},"2.2","cpe:2.3:a:internet2:shibboleth-sp:2.2:*:*:*:*:*:*:*",6,[59,64,67,70,74,78,81,83,85,87,89,91],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36855","Secunia",[63],"Vendor Advisory",{"url":65,"source":61,"tags":66},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36861",[63],{"url":68,"source":61,"tags":69},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36876",[63],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fshibboleth.internet2.edu\u002Fsecadv\u002Fsecadv_20090817.txt","Internet2",[63],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1895","Debian",[],{"url":79,"source":76,"tags":80},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1896",[],{"url":60,"source":61,"tags":82},[63],{"url":65,"source":61,"tags":84},[63],{"url":68,"source":61,"tags":86},[63],{"url":71,"source":72,"tags":88},[63],{"url":75,"source":76,"tags":90},[],{"url":79,"source":76,"tags":92},[],12,[95],{"id":96,"name":96,"description":97},"Unknown","CWE-310",1,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2009-3475? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-3475, a high severity cyber security vulnerability from 2009. Internet2 Shibboleth Service Provider software 1.3.x before ...","CVE-2009-3475, CVE-2009-3475 vulnerability, CVE-2009-3475 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, internet2 security, shibboleth-sp vulnerability","\u002Fwhat-is\u002Fcve-2009-3475",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-3475","Cybersecurity","CVE-2009-3475, CVE-2009-3475 vulnerability, CVE-2009-3475 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126],{"Operator":28,"Negate":28,"Nodes":127},[128],{"Operator":129,"Negate":32,"CPEMatch":130},"OR",[131,133,135,137,139,141],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":132,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CE02AD93-8ED6-46F1-81D8-B70CB9EB79BF",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":134,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A6CF3BEC-262B-4901-8D73-D8BB1869A166",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":136,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"4515685C-B170-4829-9261-8FAD5C9F1874",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":138,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8FC9CB94-188C-4BE2-AD8E-EBBA5BA3731E",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":140,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B9E3DA80-673A-47D7-BDE2-0AC112BB6C4C",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":142,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"673CCD0B-9202-4EBA-96B2-11A438E8D464",[],[],{"lastModified":11,"cacheTime":146,"version":22},1792446610670,{"score":148,"band":149,"action":150,"scoredAt":151},46,"Medium","Plan remediation","2026-10-19T06:38:19.831315+00:00"]