PT-2007-3108 · Apache+1 · Apache Http Server+1

CVE-2007-1743 · Publicado 2007-04-13 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server (httpd) version 2.2.3

Description: The issue in suexec allows local users to potentially create arbitrary UID/GID owned files if /proc is mounted, by leveraging other vulnerabilities. This is dependent on an insecure server configuration where the user has write access to the document root.

Recommendations: For Apache HTTP Server (httpd) version 2.2.3, consider restricting write access to the document root to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-1743

ECHO-AD54-7743-1269

Produtos afetados

Apache Http Server

Debian

Referências · 8

• http://securitytracker.com/id?1017904 · Nota
• https://osv.dev/vulnerability/CVE-2007-1743 · Aviso do Fabricante
• http://marc.info/?l=apache-httpd-dev&m=117511568709063&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1743 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1743 · Aviso do Fabricante
• http://marc.info/?l=apache-httpd-dev&m=117511834512138&w=2 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=511 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-1743 · Aviso do Fabricante