PT-2011-1265 · Apache+2 · Apache Http Server+2

CVE-2007-6750 · Publicado 2011-12-27 · Atualizado 2026-03-10

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 1.x through 2.x before 2.2.15

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon outage, via partial HTTP requests. This is related to the lack of the mod reqtimeout module in affected versions. The Slowloris tool has demonstrated this capability.

Recommendations For Apache HTTP Server versions 1.x through 2.x before 2.2.15, update to version 2.2.15 or later to resolve the issue. As a temporary workaround, consider enabling the mod reqtimeout module to mitigate the risk of denial of service attacks.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-6750

HPSBUX02866

OPENSUSE-SU-2012_0314-1

SUSE-SU-2012_0284-1

SUSE-SU-2012_0323-1

Produtos afetados

Apache Http Server

Hp-Ux

Suse

Referências · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-6750 · Aviso do Fabricante
• http://ha.ckers.org/slowloris · Nota
• http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html · Aviso do Fabricante
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19481 · Nota
• https://osv.dev/vulnerability/CVE-2007-6750 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-6750 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=136612293908376&w=2 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html · Aviso do Fabricante
• http://securityfocus.com/bid/21865 · Nota
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-6750 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2007-01/0229.html · Nota
• http://securitytracker.com/id/1038144 · Nota