CVE-2009-2071
Summary
| CVE | CVE-2009-2071 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-06-15 19:30:05 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:M/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Chrome | 0.2.149.29 | All | All | All | |
| Application | Chrome | 0.2.149.30 | All | All | All | |
| Application | Chrome | 0.2.152.1 | All | All | All | |
| Application | Chrome | 0.2.153.1 | All | All | All | |
| Application | Chrome | 0.3.154.0 | All | All | All | |
| Application | Chrome | 0.3.154.3 | All | All | All | |
| Application | Chrome | 0.4.154.18 | All | All | All | |
| Application | Chrome | 0.4.154.22 | All | All | All | |
| Application | Chrome | 0.4.154.31 | All | All | All | |
| Application | Chrome | 0.4.154.33 | All | All | All | |
| Application | Chrome | 1.0.154.36 | All | All | All | |
| Application | Chrome | 1.0.154.39 | All | All | All | |
| Application | Chrome | 1.0.154.42 | All | All | All | |
| Application | Chrome | 1.0.154.43 | All | All | All | |
| Application | Chrome | 1.0.154.46 | All | All | All | |
| Application | Chrome | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Multiple Browsers Cached Certificate HTTP Site Spoofing Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Release Notes 1.0.154.53 (Chromium Developer Documentation) | af854a3a-2127-422b-91ae-364da2661108 | sites.google.com | Patch |
| 479880 – (CVE-2009-1836) Non-200 responses to proxy CONNECT requests lead to attacks on HTTPS | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| [chrome] Diff of /branches/release_154.next/src/net/http/http_transaction_winhttp.cc | af854a3a-2127-422b-91ae-364da2661108 | src.chromium.org | Patch |
| Pretty-Bad-Proxy: An Overlooked Adversary in Browsers' HTTPS Deployments - Microsoft Research | af854a3a-2127-422b-91ae-364da2661108 | research.microsoft.com | |
| 8473 - chromium - An open-source project to help move the web forward. - Monorail | af854a3a-2127-422b-91ae-364da2661108 | code.google.com | |
| Issue 7338 - chromium - 30x redirects silently honored in response to CONNECT - An open-source project to help move the web forward. - Google Project Hosting | af854a3a-2127-422b-91ae-364da2661108 | code.google.com | |
| [chrome] Revision 11669 | af854a3a-2127-422b-91ae-364da2661108 | src.chromium.org | |
| Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments - Microsoft Research | af854a3a-2127-422b-91ae-364da2661108 | research.microsoft.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.