Lucene search
MitreCVE-2007-6750HistoryDec 27, 2011 - 6:55 p.m.
CVE-2007-6750
2011-12-2718:55:00
CWE-399
mitre
web.nvd.nist.gov
2048
5
apache http server
cve-2007-6750
denial of service
mod_reqtimeout
slowloris
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7
Confidence
High
EPSS
0.023
Percentile
89.9%
The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.
Affected configurations
Node
apachehttp_serverRange≤2.2.14
ORapachehttp_serverMatch1.0
ORapachehttp_serverMatch1.0.2
ORapachehttp_serverMatch1.0.3
ORapachehttp_serverMatch1.0.5
ORapachehttp_serverMatch1.1
ORapachehttp_serverMatch1.1.1
ORapachehttp_serverMatch1.2
ORapachehttp_serverMatch1.2.4
ORapachehttp_serverMatch1.2.5
ORapachehttp_serverMatch1.2.6
ORapachehttp_serverMatch1.2.9
ORapachehttp_serverMatch1.3
ORapachehttp_serverMatch1.3.0
ORapachehttp_serverMatch1.3.1
ORapachehttp_serverMatch1.3.1.1
ORapachehttp_serverMatch1.3.2
ORapachehttp_serverMatch1.3.3
ORapachehttp_serverMatch1.3.4
ORapachehttp_serverMatch1.3.5
ORapachehttp_serverMatch1.3.6
ORapachehttp_serverMatch1.3.7
ORapachehttp_serverMatch1.3.8
ORapachehttp_serverMatch1.3.9
ORapachehttp_serverMatch1.3.10
ORapachehttp_serverMatch1.3.11
ORapachehttp_serverMatch1.3.12
ORapachehttp_serverMatch1.3.13
ORapachehttp_serverMatch1.3.14
ORapachehttp_serverMatch1.3.15
ORapachehttp_serverMatch1.3.16
ORapachehttp_serverMatch1.3.17
ORapachehttp_serverMatch1.3.18
ORapachehttp_serverMatch1.3.19
ORapachehttp_serverMatch1.3.20
ORapachehttp_serverMatch1.3.22
ORapachehttp_serverMatch1.3.23
ORapachehttp_serverMatch1.3.24
ORapachehttp_serverMatch1.3.25
ORapachehttp_serverMatch1.3.26
ORapachehttp_serverMatch1.3.27
ORapachehttp_serverMatch1.3.28
ORapachehttp_serverMatch1.3.29
ORapachehttp_serverMatch1.3.30
ORapachehttp_serverMatch1.3.31
ORapachehttp_serverMatch1.3.32
ORapachehttp_serverMatch1.3.33
ORapachehttp_serverMatch1.3.34
ORapachehttp_serverMatch1.3.35
ORapachehttp_serverMatch1.3.36
ORapachehttp_serverMatch1.3.37
ORapachehttp_serverMatch1.3.38
ORapachehttp_serverMatch1.3.39
ORapachehttp_serverMatch1.3.41
ORapachehttp_serverMatch1.3.42
ORapachehttp_serverMatch1.3.65
ORapachehttp_serverMatch1.3.68
ORapachehttp_serverMatch1.4.0
ORapachehttp_serverMatch1.99
ORapachehttp_serverMatch2.0
ORapachehttp_serverMatch2.0.9
ORapachehttp_serverMatch2.0.28
ORapachehttp_serverMatch2.0.28beta
ORapachehttp_serverMatch2.0.32
ORapachehttp_serverMatch2.0.32beta
ORapachehttp_serverMatch2.0.34beta
ORapachehttp_serverMatch2.0.35
ORapachehttp_serverMatch2.0.36
ORapachehttp_serverMatch2.0.37
ORapachehttp_serverMatch2.0.38
ORapachehttp_serverMatch2.0.39
ORapachehttp_serverMatch2.0.40
ORapachehttp_serverMatch2.0.41
ORapachehttp_serverMatch2.0.42
ORapachehttp_serverMatch2.0.43
ORapachehttp_serverMatch2.0.44
ORapachehttp_serverMatch2.0.45
ORapachehttp_serverMatch2.0.46
ORapachehttp_serverMatch2.0.47
ORapachehttp_serverMatch2.0.48
ORapachehttp_serverMatch2.0.49
ORapachehttp_serverMatch2.0.50
ORapachehttp_serverMatch2.0.51
ORapachehttp_serverMatch2.0.52
ORapachehttp_serverMatch2.0.53
ORapachehttp_serverMatch2.0.54
ORapachehttp_serverMatch2.0.55
ORapachehttp_serverMatch2.0.56
ORapachehttp_serverMatch2.0.57
ORapachehttp_serverMatch2.0.58
ORapachehttp_serverMatch2.0.59
ORapachehttp_serverMatch2.0.60
ORapachehttp_serverMatch2.0.61
ORapachehttp_serverMatch2.0.63
ORapachehttp_serverMatch2.1
ORapachehttp_serverMatch2.1.1
ORapachehttp_serverMatch2.1.2
ORapachehttp_serverMatch2.1.3
ORapachehttp_serverMatch2.1.4
ORapachehttp_serverMatch2.1.5
ORapachehttp_serverMatch2.1.6
ORapachehttp_serverMatch2.1.7
ORapachehttp_serverMatch2.1.8
ORapachehttp_serverMatch2.1.9
ORapachehttp_serverMatch2.2
ORapachehttp_serverMatch2.2.0
ORapachehttp_serverMatch2.2.1
ORapachehttp_serverMatch2.2.2
ORapachehttp_serverMatch2.2.3
ORapachehttp_serverMatch2.2.4
ORapachehttp_serverMatch2.2.6
ORapachehttp_serverMatch2.2.8
ORapachehttp_serverMatch2.2.9
ORapachehttp_serverMatch2.2.10
ORapachehttp_serverMatch2.2.11
ORapachehttp_serverMatch2.2.12
ORapachehttp_serverMatch2.2.13
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apache | http_server | 1.3.8 | cpe:/a:apache:http_server:1.3.8::: |
| apache | http_server | 1.2.4 | cpe:/a:apache:http_server:1.2.4::: |
| apache | http_server | 1.3.10 | cpe:/a:apache:http_server:1.3.10::: |
| apache | http_server | 2.0.50 | cpe:/a:apache:http_server:2.0.50::: |
| apache | http_server | 1.3.39 | cpe:/a:apache:http_server:1.3.39::: |
| apache | http_server | 2.2.9 | cpe:/a:apache:http_server:2.2.9::: |
| apache | http_server | 1.4.0 | cpe:/a:apache:http_server:1.4.0::: |
| apache | http_server | 1.2.6 | cpe:/a:apache:http_server:1.2.6::: |
| apache | http_server | 1.3.31 | cpe:/a:apache:http_server:1.3.31::: |
| apache | http_server | 1.2.9 | cpe:/a:apache:http_server:1.2.9::: |
References
archives.neohapsis.com/archives/bugtraq/2007-01/0229.html
ha.ckers.org/slowloris/
lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html
lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html
marc.info/?l=bugtraq&m=136612293908376&w=2
www.securityfocus.com/bid/21865
www.securitytracker.com/id/1038144
exchange.xforce.ibmcloud.com/vulnerabilities/72345
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19481
Social References
More
Related
ibm
ibm
hackerone
hackerone
Tor: solving TOR vulnerability, in other to make bruteforce difficult
2017-09-14 14:11:07
cvelist
cvelist
CVE-2007-6750
2011-12-27 18:00:00
prion
prion
Code injection
2011-12-27 18:55:00
debiancve
debiancve
CVE-2007-6750
2011-12-27 18:55:00
nessus
nessus
openSUSE Security Update : apache2-201202 (openSUSE-SU-2012:0314-1)
2014-06-13 00:00:00
SuSE 10 Security Update : Apache2 (ZYPP Patch Number 7972)
2012-02-29 00:00:00
f5
f5
K12636 : Slowloris denial-of-service attack vulnerability CVE-2007-6750
2015-04-29 00:00:00
SOL12636 - Slowloris denial-of-service attack vulnerability CVE-2007-6750
2011-02-22 00:00:00
nvd
nvd
CVE-2007-6750
2011-12-27 18:55:00
ubuntucve
ubuntucve
CVE-2007-6750
2011-12-27 00:00:00
openvas
openvas
SuSE Update for apache2 openSUSE-SU-2012:0314-1 (apache2)
2012-08-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0284-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0323-1)
2021-06-09 00:00:00
suse
suse
Security update for Apache2 (important)
2012-03-06 21:08:42
Security update for Apache2 (important)
2012-02-18 13:08:15
apache2: fixed various security bugs (important)
2012-02-28 18:08:26
apple
apple
About the security content of macOS Server 5.3
2017-03-27 00:00:00
About the security content of macOS Server 5.3 - Apple Support
2017-03-28 04:58:08
nmap
nmap
http-slowloris-check NSE Script
2012-08-24 09:19:30
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2013-09-23 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7
Confidence
High
EPSS
0.023
Percentile
89.9%
Related for CVE-2007-6750