NVD

Id
53923  
Name
CVE-2007-1743  
Description
suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities to create arbitrary UID/GID owned files if /proc is mounted. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root." In addition, because this is dependent on other vulnerabilities, perhaps this is resultant and should not be included in CVE.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-13  
Modified Date
2008-09-05  
Seq
2007-1743  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273410 53923 CVE-2007-1743 20070411 Apache HTTPD suEXEC Multiple Vulnerabilities  View
273411 53923 CVE-2007-1743 [apache-http-dev] 20070328 [Fwd: iDefense Final Notice [IDEF1445]]  View
273412 53923 CVE-2007-1743 [apache-http-dev] 20070328 Re: [Fwd: iDefense Final Notice [IDEF1445]]  View
273413 53923 CVE-2007-1743 1017904  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53067 JVNDB-2007-001759 Apache HTTP Server (httpd) の suexec における任意の UID/GID 所有のファイルを生成される脆弱性 Apache HTTP Server (httpd) の suexec は、コマンドライン上でユーザとグループ ID の組み合わせを確認しないため、/proc がマウントされている際に、任意の UID/GID 所有のファイルを生成される脆弱性が存在します。 CVE-2007-1743 25098 CVE-2007-1743 53923 4.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001759.html 2007-04-13 2012-06-26 View