CVE-2007-0450: apache http_server

Modified

AliasesCGA-8992-6f23-526pCGA-ffhm-9jp8-7c72GHSA-4prh-gqw8-rgh5

Published 16-03-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-0450 is a medium (CVSS 5.0) vulnerability in apache http_server. EPSS estimates a 91.16% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 14-03-2007)

Source freshness unavailable

How is this decided?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

91.16%

0%100%

Critical · +0.39 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 9 · Related 2

RHSA-2007:0326 RHSA-2007:0327 RHSA-2007:0328 RHSA-2007:0340 RHSA-2007:0360 RHSA-2007:1069+5 more

Timeline

16-03-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

91.16%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

Increase +0.39 pp

From 90.77% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databaseremotelinuxVerified
Apache Tomcat 5.x/6.0.x - Directory Traversal
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-22Improper Limitation of a Pathname to a Restricted DirectoryThe product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Apache2 products

http_serverna
tomcat≥ 5.0.0, < 5.5.22 | ≥ 6.0.0, < 6.0.10

Chainguard1 product

apache2< 2.4.63-r1

Org.apache.tomcat1 product

tomcat≥ 5.0, < 5.5.22 | ≥ 6.0, < 6.0.10

Wolfi1 product

apache2< 2.4.63-r1

4 vendors · 5 products

References

70 links

tomcat.apache.org/security-4.htmlX Refsource CONFIRMVendor AdvisoryWEB
secunia.com/advisories/30908Third Party AdvisoryX Refsource SECUNIA
lists.vmware.com/pipermail/security-announce/2008/000003.htmlMailing ListX Refsource MLISTThird Party AdvisoryWEB
www.vupen.com/english/advisories/2007/2732VDB EntryX Refsource VUPENThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.vupen.com/english/advisories/2007/3087VDB EntryX Refsource VUPENThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/32988VDB EntryX Refsource XFThird Party AdvisoryWEB
secunia.com/advisories/30899Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/1979/referencesVDB EntryX Refsource VUPENThird Party Advisory
www.novell.com/linux/security/advisories/2007_5_sr.htmlVendor AdvisoryX Refsource SUSEBroken Link

Show all 70 references

lists.apple.com/archives/security-announce//2007/Jul/msg00004.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party AdvisoryWEB
www.vupen.com/english/advisories/2008/0065VDB EntryX Refsource VUPENThird Party Advisory
www.securityfocus.com/archive/1/500412/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/33668Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/485938/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.securityfocus.com/archive/1/500396/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/25280Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-0360.htmlVendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
secunia.com/advisories/24732Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/0233VDB EntryX Refsource VUPENThird Party Advisory
www.securityfocus.com/bid/22960VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/28365Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2007-206.htmX Refsource CONFIRMThird Party Advisory
tomcat.apache.org/security-6.htmlX Refsource CONFIRMVendor AdvisoryWEB
www.sec-consult.com/287.htmlX Refsource MISCBroken Link
www.vupen.com/english/advisories/2007/3386VDB EntryX Refsource VUPENThird Party Advisory
www.sec-consult.com/fileadmin/Advisories/20070314-0-apache_tomcat_directory_traversal.txtX Refsource MISCBroken Link
www.redhat.com/support/errata/RHSA-2007-0327.htmlVendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
secunia.com/advisories/27037Third Party AdvisoryX Refsource SECUNIA
docs.info.apple.com/article.html?artnum=306172X Refsource CONFIRMThird Party AdvisoryWEB
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795Vendor AdvisoryX Refsource HPBroken Link
www.vupen.com/english/advisories/2007/0975VDB EntryX Refsource VUPENThird Party Advisory
tomcat.apache.org/security-5.htmlX Refsource CONFIRMVendor AdvisoryWEB
www.securityfocus.com/bid/25159VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/26660Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0261.htmlVendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
www.fujitsu.com/global/support/software/security/products-f/interstage-200702e.htmlX Refsource CONFIRMThird Party Advisory
security.gentoo.org/glsa/glsa-200705-03.xmlVendor AdvisoryX Refsource GENTOOThird Party AdvisoryWEB
secunia.com/advisories/25106Third Party AdvisoryX Refsource SECUNIA
securityreason.com/securityalert/2446Third Party AdvisoryX Refsource SREASON
community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspxX Refsource CONFIRMBroken Link
support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540X Refsource CONFIRMBroken LinkThird Party Advisory
www.securityfocus.com/archive/1/462791/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.mandriva.com/security/advisories?name=MDKSA-2007:241Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.novell.com/linux/security/advisories/2007_15_sr.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/26235Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10643VDB EntrySignatureX Refsource OVALThird Party Advisory
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
nvd.nist.gov/vuln/detail/CVE-2007-0450Advisory
github.com/apache/tomcat/commit/0c5ec5b958f1b59840ee155a23ab409755b039f6WEB
github.com/apache/tomcat/commit/19ec1ccd17fbb98511bc1c12b255253c4f48b85fWEB
github.com/apache/tomcat/commit/ec7ff880dbc28b313bf3a2b1914f6f0371489793WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
github.com/apache/tomcatPACKAGE