vulnwire
6.2med

CVE-2007-1741

Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
6.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 44%
Public exploits
0
none known

Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root."

Exploit prediction (EPSS)

0.52% probability of exploitation in the next 30 days, higher than 44% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.2AV:L/AC:H/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization
Technology feeds
Apache HTTP Server (RSS, critical only)

References

  • osvdb.org /38639 · vdb-entry, x_refsource_OSVDB, x_transferred
  • labs.idefense.com /intelligence/vulnerabilities/display.php?id=511 · third-party-advisory, x_refsource_IDEFENSE, x_transferred
  • marc.info /?l=apache-httpd-dev&m=117511834512138&w=2 · mailing-list, x_refsource_MLIST, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/33584 · vdb-entry, x_refsource_XF, x_transferred
  • securitytracker.com /id?1017904 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /bid/23438 · vdb-entry, x_refsource_BID, x_transferred
  • marc.info /?l=apache-httpd-dev&m=117511568709063&w=2 · mailing-list, x_refsource_MLIST, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.