{"vulnerability": "cve-2009-4769", "sightings": [{"uuid": "9e29d8c3-3dab-463d-94ce-4db51c00083f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-4769", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "28739ebf-85d1-4c12-9899-eac711d53704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-4769", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:43.000000Z"}, {"uuid": "82fe1afe-7648-4f0c-915e-12aeb34af165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-4769", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/httpdx_tolog_format.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d0a22431-0fff-4e96-9aea-94c0b845e1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-4769", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/httpdx_tolog_format.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "6558b95c-fe23-46fe-8451-9a5e4a1c17fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-4769", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16794", "content": "", "creation_timestamp": "2010-08-25T00:00:00.000000Z"}, {"uuid": "21f8948d-b7f8-44e1-8ef4-6cd8512c56db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-4769", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16732", "content": "", "creation_timestamp": "2010-08-25T00:00:00.000000Z"}, {"uuid": "54dde1c1-f30c-46f5-a261-d5518353a833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-4769", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/httpdx_tolog_format.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"jduck \"], \"autofilter_ports\": [21, 2121], \"autofilter_services\": [\"ftp\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a format string vulnerability in HTTPDX FTP server.\\n          By sending a specially crafted FTP command containing format specifiers, an\\n          attacker can corrupt memory and execute arbitrary code.\\n\\n          By default logging is off for HTTP, but enabled for the 'moderator' user\\n          via FTP.\", \"disclosure_date\": \"2009-11-17\", \"fullname\": \"exploit/windows/ftp/httpdx_tolog_format\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"HTTPDX tolog() Function Format String Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/ftp/httpdx_tolog_format.rb\", \"platform\": \"Windows\", \"post_auth\": true, \"rank\": 500, \"ref_name\": \"windows/ftp/httpdx_tolog_format\", \"references\": [\"CVE-2009-4769\", \"OSVDB-60181\"], \"rport\": 21, \"session_types\": false, \"targets\": [\"Automatic Targeting\", \"httpdx 1.4 - Windows XP SP3 English\", \"httpdx 1.4.5 - Windows XP SP3 English\", \"httpdx 1.4.6 - Windows XP SP3 English\", \"httpdx 1.4.6b - Windows XP SP3 English\", \"httpdx 1.5 - Windows XP SP3 English\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:37.895414Z"}, {"uuid": "632f3e44-afde-4f1d-abc1-e4b509cbf2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-4769", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/httpdx_tolog_format.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"jduck \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a format string vulnerability in HTTPDX HTTP server.\\n          By sending a specially crafted HTTP request containing format specifiers, an\\n          attacker can corrupt memory and execute arbitrary code.\\n\\n          By default logging is off for HTTP, but enabled for the 'moderator' user\\n          via FTP.\", \"disclosure_date\": \"2009-11-17\", \"fullname\": \"exploit/windows/http/httpdx_tolog_format\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"HTTPDX tolog() Function Format String Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/httpdx_tolog_format.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/http/httpdx_tolog_format\", \"references\": [\"CVE-2009-4769\", \"OSVDB-60182\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\", \"httpdx 1.4 - Windows XP SP3 English\", \"httpdx 1.4.5 - Windows XP SP3 English\", \"httpdx 1.4.6 - Windows XP SP3 English\", \"httpdx 1.4.6b - Windows XP SP3 English\", \"httpdx 1.5 - Windows XP SP3 English\", \"Debug target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:51.549410Z"}]}