PT-2008-1556 · Apache · Apache Http Server

Published 2008-01-12 · Updated 2024-08-07 · CVE-2007-6423

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.2.x before 2.2.7-dev

Description The issue is related to an unspecified vulnerability in mod proxy balancer for Apache HTTP Server when running on Windows. It allows remote attackers to trigger memory corruption via a long URL.

Recommendations For Apache HTTP Server versions 2.2.x before 2.2.7-dev, consider updating to a version that is not affected by this issue, as the vendor could not reproduce it and no specific fix is provided.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-6423

Affected Products

Apache Http Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-6423 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6423 · Note
• http://securityreason.com/securityalert/3523 · Note
• http://securityfocus.com/bid/27236 · Note
• http://securityfocus.com/archive/1/486169/100/0/threaded · Note