CVE Vulnerabilities

CVE-2007-1863

Published: Jun 27, 2007 | Modified: Feb 15, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.

Affected Software

Name Vendor Start Version End Version
Mac_os_x_server Apple 10.0 (including) 10.0 (including)
Mac_os_x_server Apple 10.1 (including) 10.1 (including)
Mac_os_x_server Apple 10.1.1 (including) 10.1.1 (including)
Mac_os_x_server Apple 10.1.2 (including) 10.1.2 (including)
Mac_os_x_server Apple 10.1.3 (including) 10.1.3 (including)
Mac_os_x_server Apple 10.1.4 (including) 10.1.4 (including)
Mac_os_x_server Apple 10.1.5 (including) 10.1.5 (including)
Mac_os_x_server Apple 10.2 (including) 10.2 (including)
Mac_os_x_server Apple 10.2.1 (including) 10.2.1 (including)
Mac_os_x_server Apple 10.2.2 (including) 10.2.2 (including)
Mac_os_x_server Apple 10.2.3 (including) 10.2.3 (including)
Mac_os_x_server Apple 10.2.4 (including) 10.2.4 (including)
Mac_os_x_server Apple 10.2.5 (including) 10.2.5 (including)
Mac_os_x_server Apple 10.2.6 (including) 10.2.6 (including)
Mac_os_x_server Apple 10.2.7 (including) 10.2.7 (including)
Mac_os_x_server Apple 10.2.8 (including) 10.2.8 (including)
Mac_os_x_server Apple 10.3 (including) 10.3 (including)
Mac_os_x_server Apple 10.3.1 (including) 10.3.1 (including)
Mac_os_x_server Apple 10.3.2 (including) 10.3.2 (including)
Mac_os_x_server Apple 10.3.3 (including) 10.3.3 (including)
Mac_os_x_server Apple 10.3.4 (including) 10.3.4 (including)
Mac_os_x_server Apple 10.3.5 (including) 10.3.5 (including)
Mac_os_x_server Apple 10.3.6 (including) 10.3.6 (including)
Mac_os_x_server Apple 10.3.7 (including) 10.3.7 (including)
Mac_os_x_server Apple 10.3.8 (including) 10.3.8 (including)
Mac_os_x_server Apple 10.3.9 (including) 10.3.9 (including)
Mac_os_x_server Apple 10.4 (including) 10.4 (including)
Mac_os_x_server Apple 10.4.1 (including) 10.4.1 (including)
Mac_os_x_server Apple 10.4.2 (including) 10.4.2 (including)
Mac_os_x_server Apple 10.4.3 (including) 10.4.3 (including)
Mac_os_x_server Apple 10.4.4 (including) 10.4.4 (including)
Mac_os_x_server Apple 10.4.5 (including) 10.4.5 (including)
Mac_os_x_server Apple 10.4.6 (including) 10.4.6 (including)
Mac_os_x_server Apple 10.4.7 (including) 10.4.7 (including)
Mac_os_x_server Apple 10.4.8 (including) 10.4.8 (including)
Mac_os_x_server Apple 10.4.9 (including) 10.4.9 (including)
Red Hat Certificate System 7.3 RedHat ant-0:1.6.5-1jpp_1rh *
Red Hat Certificate System 7.3 RedHat avalon-logkit-0:1.2-2jpp_4rh *
Red Hat Certificate System 7.3 RedHat axis-0:1.2.1-1jpp_3rh *
Red Hat Certificate System 7.3 RedHat classpathx-jaf-0:1.0-2jpp_6rh *
Red Hat Certificate System 7.3 RedHat classpathx-mail-0:1.1.1-2jpp_8rh *
Red Hat Certificate System 7.3 RedHat geronimo-specs-0:1.0-0.M4.1jpp_10rh *
Red Hat Certificate System 7.3 RedHat jakarta-commons-modeler-0:2.0-3jpp_2rh *
Red Hat Certificate System 7.3 RedHat log4j-0:1.2.12-1jpp_1rh *
Red Hat Certificate System 7.3 RedHat mx4j-1:3.0.1-1jpp_4rh *
Red Hat Certificate System 7.3 RedHat pcsc-lite-0:1.3.3-3.el4 *
Red Hat Certificate System 7.3 RedHat rhpki-ca-0:7.3.0-20.el4 *
Red Hat Certificate System 7.3 RedHat rhpki-java-tools-0:7.3.0-10.el4 *
Red Hat Certificate System 7.3 RedHat rhpki-kra-0:7.3.0-14.el4 *
Red Hat Certificate System 7.3 RedHat rhpki-manage-0:7.3.0-19.el4 *
Red Hat Certificate System 7.3 RedHat rhpki-native-tools-0:7.3.0-6.el4 *
Red Hat Certificate System 7.3 RedHat rhpki-ocsp-0:7.3.0-13.el4 *
Red Hat Certificate System 7.3 RedHat rhpki-tks-0:7.3.0-13.el4 *
Red Hat Certificate System 7.3 RedHat tomcat5-0:5.5.23-0jpp_4rh.16 *
Red Hat Certificate System 7.3 RedHat xerces-j2-0:2.7.1-1jpp_1rh *
Red Hat Certificate System 7.3 RedHat xml-commons-0:1.3.02-2jpp_1rh *
Red Hat Enterprise Linux 3 RedHat httpd-0:2.0.46-67.ent *
Red Hat Enterprise Linux 4 RedHat httpd-0:2.0.52-32.2.ent *
Red Hat Enterprise Linux 5 RedHat httpd-0:2.2.3-7.el5 *
Red Hat Web Application Stack for RHEL 4 RedHat httpd-0:2.0.59-1.el4s1.7 *
Apache2 Ubuntu devel *
Apache2 Ubuntu feisty *

References