vulnwire
7.5high

CVE-2007-0774in critical feed2 exploits

Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Ser…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
81.6%
percentile 100%
Public exploits
2
Exploit-DB

Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.

Exploit prediction (EPSS)

81.63% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • EDB-4162 Apache Tomcat Connector mod_jk - 'exec-shield' Remote Overflow · remote · 2007-07-08
  • EDB-16798 Apache Tomcat mod_jk 1.2.20 - Remote Buffer Overflow (Metasploit) · remote · 2010-07-25

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • tomcat.apache.org /connectors-doc/miscellaneous/changelog.html · x_refsource_CONFIRM, x_transferred
  • redhat.com /support/errata/RHSA-2007-0096.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • vupen.com /english/advisories/2007/0809 · vdb-entry, x_refsource_VUPEN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/32794 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/24558 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1017719 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /archive/1/461734/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/24398 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • cisco.com /en/US/products/products_security_advisory09186a008093f040.shtml · vendor-advisory, x_refsource_CISCO, x_transferred
  • zerodayinitiative.com /advisories/ZDI-07-008.html · x_refsource_MISC, x_transferred
  • vupen.com /english/advisories/2007/3386 · vdb-entry, x_refsource_VUPEN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5513 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/27037 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/28711 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?objectID=c01178795 · vendor-advisory, x_refsource_HP, x_transferred
  • tomcat.apache.org /security-jk.html · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2008/0331 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/22791 · vdb-entry, x_refsource_BID, x_transferred
  • gentoo.org /security/en/glsa/glsa-200703-16.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • lists.apache.org /thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apa · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apa · mailing-list, x_refsource_MLIST, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.