CVE-2007-1863

Опубликовано: 27 июн. 2007

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.

Ссылки

http://bugs.gentoo.org/show_bug.cgi?id=186219
Third Party Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244658
Issue Tracking
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795
Broken Link
http://httpd.apache.org/security/vulnerabilities_20.html
Vendor Advisory
http://httpd.apache.org/security/vulnerabilities_22.html
Vendor Advisory
http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2009/000062.html
Third Party Advisory
VDB Entry
http://osvdb.org/37079
Broken Link
http://rhn.redhat.com/errata/RHSA-2007-0534.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2007-0556.html
Third Party Advisory
VDB Entry
http://secunia.com/advisories/25830
Broken Link
http://secunia.com/advisories/25873
Broken Link
http://secunia.com/advisories/25920
Broken Link
http://secunia.com/advisories/26273
Broken Link
http://secunia.com/advisories/26443
Broken Link
http://secunia.com/advisories/26508
Broken Link
http://secunia.com/advisories/26822
Broken Link
http://secunia.com/advisories/26842
Broken Link
http://secunia.com/advisories/26993
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.0.37 (включая) до 2.0.61 (исключая)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.2.0 (включая) до 2.2.6 (исключая)

EPSS

Процентиль: 96%

0.30391

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2007-1863

ubuntu

почти 18 лет назад

CVE-2007-1863

redhat

около 18 лет назад

CVE-2007-1863

debian

почти 18 лет назад

cache_util.c in the mod_cache module in Apache HTTP Server (httpd), wh ...

GHSA-hcvj-926w-fhhh

github

около 3 лет назад

ELSA-2007-0556

oracle-oval

почти 18 лет назад

ELSA-2007-0556: Moderate: httpd security update (MODERATE)

EPSS

Процентиль: 96%

0.30391

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other