Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2007-6750
HistoryDec 27, 2011 - 12:00 a.m.

CVE-2007-6750

2011-12-2700:00:00
ubuntu.com
ubuntu.com
232

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.425

Percentile

97.4%

JSON

The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a
denial of service (daemon outage) via partial HTTP requests, as
demonstrated by Slowloris, related to the lack of the mod_reqtimeout module
in versions before 2.2.15.

Bugs

Notes

Author Note
mdeslaur 1005669 commit fixes CVE-2010-1623 hardy users who want to protect against Slowloris are recommended to update to lucid or higher. Adding a new module turned on by default to hardy’s apache2 is too intrusive.

Related

ibm 3
hackerone 2
cvelist 2
prion 2
debiancve 2
nessus 39
f5 4
nvd 2
cve 2
openvas 42
centos 1
debian 2
slackware 2
ubuntu 2
fedora 3
httpd 2
oraclelinux 1
ubuntucve 1
redhat 2
veracode 1
suse 4
apple 2
nmap 1
freebsd 1
gentoo 2
kaspersky 1
oracle 1
ibm
ibm
Security Bulletin: IBM Security Network Intrusion Prevention System is affected by a vulnerability in Apache (CVE-2007-6750)
2022-02-23 19:48:26
Security Bulletin: Denial of service for accessing data using HTTP protocol on IBM SONAS (CVE-2007-6750)
2018-06-18 00:08:32
Security Bulletin: Denial of service for accessing data using HTTP protocol on IBM Storwize V7000 Unified (CVE-2007-6750)
2018-06-18 00:08:33
hackerone
hackerone
Tor: solving TOR vulnerability, in other to make bruteforce difficult
2017-09-14 14:11:07
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
cvelist
cvelist
CVE-2007-6750
2011-12-27 18:00:00
CVE-2010-1623
2010-10-04 20:00:00
prion
prion
Code injection
2011-12-27 18:55:00
Design/Logic Flaw
2010-10-04 21:00:00
debiancve
debiancve
CVE-2007-6750
2011-12-27 18:55:00
CVE-2010-1623
2010-10-04 21:00:03
nessus
nessus
F5 Networks BIG-IP : Slowloris denial-of-service attack vulnerability (K12636)
2017-02-28 00:00:00
Scientific Linux Security Update : apr-util on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
Debian DSA-2117-1 : apr-util - denial of service
2010-10-06 00:00:00
f5
f5
K12636 : Slowloris denial-of-service attack vulnerability CVE-2007-6750
2015-04-29 00:00:00
SOL12636 - Slowloris denial-of-service attack vulnerability CVE-2007-6750
2011-02-22 00:00:00
SOL15902 - Apache vulnerability CVE-2010-1623
2014-12-11 00:00:00
nvd
nvd
CVE-2007-6750
2011-12-27 18:55:00
CVE-2010-1623
2010-10-04 21:00:03
cve
cve
CVE-2007-6750
2011-12-27 18:55:00
CVE-2010-1623
2010-10-04 21:00:03
openvas
openvas
Debian: Security Advisory (DSA-2117-1)
2023-03-08 00:00:00
Fedora Update for apr-util FEDORA-2010-15953
2010-11-04 00:00:00
CentOS Update for apr-util CESA-2010:0950 centos4 x86_64
2012-07-30 00:00:00
centos
centos
apr security update
2011-01-27 08:46:39
debian
debian
[SECURITY] [DSA-2117-1] New apr-util packages fix denial of service
2010-10-04 21:35:18
[SECURITY] [DSA-2117-1] New apr-util packages fix denial of service
2010-10-04 21:35:18
slackware
slackware
[slackware-security] apr-util
2011-02-11 01:16:50
[slackware-security] httpd
2011-02-11 01:17:26
ubuntu
ubuntu
APR-util vulnerability
2010-11-25 00:00:00
Apache vulnerabilities
2010-11-25 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: apr-util-1.3.10-1.fc14
2010-11-10 01:19:10
[SECURITY] Fedora 13 Update: apr-util-1.3.10-1.fc13
2010-10-28 05:47:25
[SECURITY] Fedora 12 Update: apr-util-1.3.10-1.fc12
2010-10-28 05:58:28
httpd
httpd
Apache Httpd < 2.2.17 : apr_bridage_split_line DoS
2010-03-03 00:00:00
Apache Httpd < 2.0.64 : apr_bridage_split_line DoS
2010-03-03 00:00:00
oraclelinux
oraclelinux
apr-util security update
2010-12-07 00:00:00
ubuntucve
ubuntucve
CVE-2010-1623
2010-10-04 00:00:00
redhat
redhat
(RHSA-2010:0950) Moderate: apr-util security update
2010-12-07 00:00:00
(RHSA-2011:0897) Moderate: JBoss Enterprise Web Server 1.0.2 update
2011-06-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:51:33
suse
suse
Security update for Apache2 (important)
2012-03-06 21:08:42
Security update for Apache2 (important)
2012-02-18 13:08:15
apache2: fixed various security bugs (important)
2012-02-28 18:08:26
apple
apple
About the security content of macOS Server 5.3
2017-03-27 00:00:00
About the security content of macOS Server 5.3 - Apple Support
2017-03-28 04:58:08
nmap
nmap
http-slowloris-check NSE Script
2012-08-24 09:19:30
freebsd
freebsd
apr -- multiple vunerabilities
2010-10-02 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2013-09-23 00:00:00
Apache Portable Runtime, APR Utility Library: Denial of service
2014-05-18 00:00:00
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.425

Percentile

97.4%

JSON
Related for UB:CVE-2007-6750
ibm3hackerone2cvelist2prion2debiancve2nessus39f54nvd2cve2openvas42centos1debian2slackware2ubuntu2fedora3httpd2oraclelinux1ubuntucve1redhat2veracode1suse4apple2nmap1freebsd1gentoo2kaspersky1oracle1