CVE-2007-6420

Опубликовано: 12 янв. 2008

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.

Ссылки

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
Broken Link
http://marc.info/?l=bugtraq&m=123376588623823&w=2
Third Party Advisory
http://marc.info/?l=bugtraq&m=123376588623823&w=2
Third Party Advisory
http://secunia.com/advisories/31026
Not Applicable
http://secunia.com/advisories/32222
Not Applicable
http://secunia.com/advisories/33797
Not Applicable
http://secunia.com/advisories/34219
Not Applicable
http://security.gentoo.org/glsa/glsa-200807-06.xml
Third Party Advisory
http://securityreason.com/securityalert/3523
Third Party Advisory
http://support.apple.com/kb/HT3216
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0966.html
Third Party Advisory
http://www.securityfocus.com/archive/1/486169/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/494858/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/27236
Patch
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/31681
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-731-1
Third Party Advisory
http://www.vupen.com/english/advisories/2008/2780
Permissions Required
http://www.vupen.com/english/advisories/2009/0320
Permissions Required
https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.2.8:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10585

Средний

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2007-6420

ubuntu

больше 17 лет назад

Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.

CVE-2007-6420

redhat

около 17 лет назад

Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.

CVE-2007-6420

debian

больше 17 лет назад

Cross-site request forgery (CSRF) vulnerability in the balancer-manage ...

GHSA-6p65-8p9q-94p9

github

больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.

EPSS

Процентиль: 93%

0.10585

Средний

4.3 Medium

CVSS2

Дефекты

CWE-352