PT-2007-2222 · Apache+1 · Apache Tomcat Jk Web Server Connector+2

Published 2007-03-04 · Updated 2024-06-15 · CVE-2007-0774

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat JK Web Server Connector versions 1.2.19 through 1.2.20 Tomcat versions 4.1.34 and 5.5.20

Description The issue is a stack-based buffer overflow in the map uri to worker function, located in the jk uri worker map.c file of the mod jk.so module. This allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.

Recommendations For Apache Tomcat JK Web Server Connector versions 1.2.19 and 1.2.20, consider updating to a version that is not affected by this issue. For Tomcat versions 4.1.34 and 5.5.20, consider updating to a version that is not affected by this issue. As a temporary workaround, consider restricting access to long URLs to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-0774

HPSBUX02262

OPENSUSE-SU-2024:10625-1

RHSA-2007:0096

RHSA-2007:0164

Affected Products

Apache Tomcat Jk Web Server Connector

Hp-Ux

Apache Tomcat

References · 36

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_modjk_overflow.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16798 · Exploit
• 🔥 https://exploit-db.com/exploits/4162 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200703-16.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-0774 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10625-1 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a008093f040.shtml · Vendor Advisory
• http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html · Patch
• https://security-tracker.debian.org/tracker/CVE-2007-0774 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-0774 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0096.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0774 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-07-008.html · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 · Vendor Advisory
• https://suse.com/security/cve/CVE-2018-1323 · Note