CVE-2007-6258

 

Published at: - 19-02-2008 01:00

Last modified: - 03-02-2022 08:43

Total changes: - 2

Description

Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Host header.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• http://www.ioactive.com/vulnerabilities/mod_jk2LegacyBufferOverflowAdvisory.pdf
• VU#771937-Patch, Third Party Advisory, US Government Resource
• 27752-Patch, Third Party Advisory, VDB Entry
• 3661-Broken Link
• http://www.ioactive.com/pdfs/mod_jk2.pdf
• ADV-2008-0572-URL Repurposed
• 5386-Third Party Advisory, VDB Entry
• 5330-Third Party Advisory, VDB Entry
• 20080212 IOActive Security Advisory: Legacy mod_jk2 Buffer Overflow-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2007-6258

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures