CVE-2007-1863 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-1863
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-1863

Description: cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-499-1 TRUSTIX http://www.trustix.org/errata/2007/0026/ SUSE http://www.novell.com/linux/security/advisories/2007_61_apache2.html ST 1018303 SAID Secunia Advisory: SA27563 Secunia Advisory: SA27732 Secunia Advisory: SA30430 Secunia Advisory: SA26842 Secunia Advisory: SA26993 Secunia Advisory: SA27037 Secunia Advisory: SA25830 Secunia Advisory: SA25873 Secunia Advisory: SA25920 Secunia Advisory: SA26273 Secunia Advisory: SA26443 Secunia Advisory: SA26508 Secunia Advisory: SA26822 Secunia Advisory: SA28606 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0557.html http://rhn.redhat.com/errata/RHSA-2007-0556.html http://rhn.redhat.com/errata/RHSA-2007-0534.html MLIST http://lists.vmware.com/pipermail/security-announce/2009/000062.html MISC http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244658 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:141 http://www.mandriva.com/security/advisories?name=MDKSA-2007:140 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 GENTOO http://security.gentoo.org/glsa/glsa-200711-06.xml FEDORA http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html CONFIRM http://httpd.apache.org/security/vulnerabilities_22.html http://bugs.gentoo.org/show_bug.cgi?id=186219 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html http://support.avaya.com/elmodocs2/security/ASA-2007-353.htm http://httpd.apache.org/security/vulnerabilities_20.html http://svn.apache.org/viewvc?view=rev&revision=535617 CERT http://www.us-cert.gov/cas/techalerts/TA08-150A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/505990/100/0/threaded BID 24649 APPLE http://lists.apple.com/archives/security-announce/2008//May/msg00001.html AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=swg1PK52702 http://www-1.ibm.com/support/docview.wss?uid=swg1PK49355

Return to the previous page.