Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-6422
HistoryJan 08, 2008 - 12:00 a.m.

CVE-2007-6422

2008-01-0800:00:00
ubuntu.com
ubuntu.com
8

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.038 Low

EPSS

Percentile

91.8%

The balancer_handler function in mod_proxy_balancer in the Apache HTTP
Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is
used, allows remote authenticated users to cause a denial of service (child
process crash) via an invalid bb variable.

Notes

Author Note
jdstrand redhat has patch
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchapache2<Β 2.0.55-4ubuntu2.3UNKNOWN
ubuntu6.10noarchapache2<Β 2.0.55-4ubuntu4.2UNKNOWN
ubuntu7.04noarchapache2<Β 2.2.3-3.2ubuntu2.1UNKNOWN
ubuntu7.10noarchapache2<Β 2.2.4-3ubuntu0.1UNKNOWN

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.038 Low

EPSS

Percentile

91.8%