PT-2011-1265 · Apache+2 · Apache Http Server+2

Published 2011-12-27 · Updated 2026-03-10 · CVE-2007-6750

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 1.x through 2.x before 2.2.15

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon outage, via partial HTTP requests. This is related to the lack of the mod reqtimeout module in affected versions. The Slowloris tool has demonstrated this capability.

Recommendations For Apache HTTP Server versions 1.x through 2.x before 2.2.15, update to version 2.2.15 or later to resolve the issue. As a temporary workaround, consider enabling the mod reqtimeout module to mitigate the risk of denial of service attacks.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-6750

HPSBUX02866

OPENSUSE-SU-2012_0314-1

SUSE-SU-2012_0284-1

SUSE-SU-2012_0323-1

Affected Products

Apache Http Server

Hp-Ux

Suse

References · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-6750 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-6750 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6750 · Security Note
• http://marc.info/?l=bugtraq&m=136612293908376&w=2 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-6750 · Vendor Advisory
• http://ha.ckers.org/slowloris · Note
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19481 · Note
• http://securityfocus.com/bid/21865 · Note
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 · Note
• http://archives.neohapsis.com/archives/bugtraq/2007-01/0229.html · Note
• http://securitytracker.com/id/1038144 · Note