CVE-2007-3304: apache http_server

Modified

AliasesRHSA-2007:0662DEBIAN-CVE-2007-3304

Published 20-06-2007Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2007-3304 is a medium (CVSS 4.7) vulnerability in apache http_server. EPSS estimates a 3.30% chance of exploitation in the next 30 days, higher than 88.5% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 4.7, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.7/10

010

Medium · v2.0 (NVD)

EPSS score

3.30%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 9 · Related 1

OPENSUSE-SU-2024:10623-1 RHSA-2007:0532 RHSA-2007:0556 RHSA-2007:0557 RHSA-2008:0261 RHSA-2008:0263+3 more

Timeline

20-06-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."

CVSS metrics

1 score · 1 source · 1 version

v2.04.7

EPSS trend

Probability

3.30%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.30% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (securityreason.com)
Maturity: unknown

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat9 products

enterprise_linux_desktop5.0
enterprise_linux_server5.0
enterprise_linux_workstation5.0
httpd< 0:2.0.46-68.ent | < 0:2.0.52-32.3.ent
httpd-debuginfo< 0:2.0.46-68.ent | < 0:2.0.52-32.3.ent

Show all 9

Apache1 product

http_server≥ 1.3.0, < 1.3.39 | ≥ 2.0.0, < 2.0.61 | ≥ 2.2.0, < 2.2.6

Canonical1 product

ubuntu_linuxEOL6.06 | 6.10 | 7.04

Debian1 product

apache2< 2.2.4-2

Fedoraproject1 product

fedoraEOL7

5 vendors · 13 products

References

99 links

secunia.com/advisories/28606Third Party AdvisoryX Refsource SECUNIANot Applicable
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245111X Refsource MISCIssue TrackingThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:142Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/26822Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
www.vupen.com/english/advisories/2007/4305VDB EntryX Refsource VUPENPermissions Required
www.vupen.com/english/advisories/2007/3420VDB EntryX Refsource VUPENPermissions Required
www.redhat.com/support/errata/RHSA-2007-0557.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
osvdb.org/38939VDB EntryX Refsource OSVDBBroken Link
www-1.ibm.com/support/docview.wss?uid=swg1PK52702Vendor AdvisoryX Refsource AIXAPARThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:140Vendor AdvisoryX Refsource MANDRIVABroken Link

Show all 99 references

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01182588Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/25827Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
secunia.com/advisories/25920Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
secunia.com/advisories/26993Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
secunia.com/advisories/28212Third Party AdvisoryX Refsource SECUNIANot Applicable
security.psnc.pl/files/apache_report.pdfX Refsource MISCThird Party Advisory
www.securitytracker.com/id?1018304VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
secunia.com/advisories/27563Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/27732Third Party AdvisoryX Refsource SECUNIANot Applicable
svn.apache.org/viewvc?view=rev&revision=547987X Refsource CONFIRMThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-103179-1Vendor AdvisoryX Refsource SUNALERTBroken Link
secunia.com/advisories/27209Third Party AdvisoryX Refsource SECUNIANot Applicable
www.redhat.com/support/errata/RHSA-2007-0662.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/26790Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
rhn.redhat.com/errata/RHSA-2007-0556.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
httpd.apache.org/security/vulnerabilities_20.htmlX Refsource CONFIRMVendor Advisory
www.novell.com/linux/security/advisories/2007_61_apache2.htmlVendor AdvisoryX Refsource SUSEBroken Link
www.securityfocus.com/archive/1/469899/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
marc.info?l=apache-httpd-dev&m=118252946632447&w=2Mailing ListX Refsource MLISTIssue TrackingThird Party Advisory
secunia.com/advisories/26759Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
www.vupen.com/english/advisories/2007/3494VDB EntryX Refsource VUPENPermissions Required
www-1.ibm.com/support/search.wss?rs=0&q=PK50467&apar=onlyVendor AdvisoryX Refsource AIXAPARThird Party Advisory
www.trustix.org/errata/2007/0026/Vendor AdvisoryX Refsource TRUSTIXBroken Link
www.redhat.com/errata/RHSA-2007-0532.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
httpd.apache.org/security/vulnerabilities_22.htmlX Refsource CONFIRMVendor Advisory
issues.rpath.com/browse/RPL-1710X Refsource CONFIRMBroken Link
mail-archives.apache.org/mod_mbox/httpd-dev/200706.mbox/%3c20070629141032.GA15192%40redhat.com%3eMailing ListX Refsource MLIST
www.securityfocus.com/archive/1/505990/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
securityreason.com/securityalert/2814Third Party AdvisoryX Refsource SREASONExploit
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11589VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/27121Third Party AdvisoryX Refsource SECUNIANot Applicable
www.securityfocus.com/archive/1/471832/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.vupen.com/english/advisories/2008/0233VDB EntryX Refsource VUPENPermissions Required
www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/26211Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/35095VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/26443Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
lists.vmware.com/pipermail/security-announce/2009/000062.htmlMailing ListX Refsource MLISTThird Party Advisory
httpd.apache.org/security/vulnerabilities_13.htmlX Refsource CONFIRMVendor Advisory
security.gentoo.org/glsa/glsa-200711-06.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/28224Third Party AdvisoryX Refsource SECUNIANot Applicable
sunsolve.sun.com/search/document.do?assetkey=1-66-200032-1Vendor AdvisoryX Refsource SUNALERTBroken Link
secunia.com/advisories/25830Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
www.securityfocus.com/bid/24215VDB EntryX Refsource BIDThird Party Advisory
support.avaya.com/elmodocs2/security/ASA-2007-363.htmX Refsource CONFIRMThird Party Advisory
www.ubuntu.com/usn/usn-499-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.redhat.com/support/errata/RHSA-2008-0261.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/26508Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2007-353.htmX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/26842Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
www.vupen.com/english/advisories/2007/3283VDB EntryX Refsource VUPENPermissions Required
www-1.ibm.com/support/docview.wss?uid=swg1PK53984Vendor AdvisoryX Refsource AIXAPARThird Party Advisory
www.vupen.com/english/advisories/2007/2727VDB EntryX Refsource VUPENPermissions Required
secunia.com/advisories/26611Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
secunia.com/advisories/26273Third Party AdvisoryX Refsource SECUNIANot ApplicableVendor Advisory
bugs.gentoo.org/show_bug.cgi?id=186219X Refsource CONFIRMIssue TrackingThird Party Advisory
www.vupen.com/english/advisories/2007/3100VDB EntryX Refsource VUPENPermissions Required
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
access.redhat.com/errata/RHSA-2007:0662Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=245111REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0662.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-3304REPORT
www.cve.org/CVERecord?id=CVE-2007-3304Advisory
nvd.nist.gov/vuln/detail/CVE-2007-3304Advisory
security-tracker.debian.org/tracker/CVE-2007-3304Advisory