ECHO-1E54-75FE-1AAE Local DoS in Apache httpd 2.0.59/2.2.4 with the Prefork MPM: a worker process can stop request processing or force the master to fork many workers. Both the Apache and Red Hat vendors state this is "by design" and "Not a vulnerability" - in the httpd security model the less privileged children fully handle connections, so any local user able to run arbitrary code in a child can do this; hosts with untrusted local users must use suexec. NVD lists only 2.0.59/2.2.4 (shipped is 2.4.68). Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2007-3303

Bulletin has no description...