NVD

Id
55991  
Name
CVE-2007-3847  
Description
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-08-23  
Modified Date
2013-07-17  
Seq
2007-3847  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284892 55991 CVE-2007-3847 http://bugs.gentoo.org/show_bug.cgi?id=186219  View
284893 55991 CVE-2007-3847 http://docs.info.apple.com/article.html?artnum=307562  View
284894 55991 CVE-2007-3847 SSRT071476  View
284895 55991 CVE-2007-3847 http://httpd.apache.org/security/vulnerabilities_20.html  View
284896 55991 CVE-2007-3847 http://httpd.apache.org/security/vulnerabilities_22.html  View
284897 55991 CVE-2007-3847 APPLE-SA-2008-05-28  View
284898 55991 CVE-2007-3847 APPLE-SA-2008-03-18  View
284899 55991 CVE-2007-3847 [security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server  View
284900 55991 CVE-2007-3847 [apache-cvs] 20070801 svn commit: r561616 - in /httpd/httpd/trunk: CHANGES  View
284901 55991 CVE-2007-3847 [apache-httpd-dev] 20070801 Re: svn commit: r561616 - in /httpd/httpd/trunk: CHANGES modules/proxy/proxy_util.c  View
284902 55991 CVE-2007-3847 [apache-httpd-dev] 20070801 Re: svn commit: r561616 - in /httpd/httpd/trunk: CHANGES modules/proxy/proxy_util.c  View
284903 55991 CVE-2007-3847 oval:org.mitre.oval:def:10525  View
284904 55991 CVE-2007-3847 GLSA-200711-06  View
284905 55991 CVE-2007-3847 SSA:2008-045-02  View
284906 55991 CVE-2007-3847 http://support.avaya.com/elmodocs2/security/ASA-2007-500.htm  View
284907 55991 CVE-2007-3847 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951  View
284908 55991 CVE-2007-3847 PK50469  View
284909 55991 CVE-2007-3847 PK52702  View
284910 55991 CVE-2007-3847 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html  View
284911 55991 CVE-2007-3847 MDKSA-2007:235  View
284912 55991 CVE-2007-3847 SUSE-SA:2007:061  View
284913 55991 CVE-2007-3847 http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
284914 55991 CVE-2007-3847 FEDORA-2007-2214  View
284915 55991 CVE-2007-3847 RHSA-2007:0746  View
284916 55991 CVE-2007-3847 RHSA-2007:0747  View
284917 55991 CVE-2007-3847 RHSA-2007:0911  View
284918 55991 CVE-2007-3847 RHSA-2008:0005  View
284919 55991 CVE-2007-3847 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server  View
284920 55991 CVE-2007-3847 25489  View
284921 55991 CVE-2007-3847 1018633  View
284922 55991 CVE-2007-3847 USN-575-1  View
284923 55991 CVE-2007-3847 TA08-150A  View
284924 55991 CVE-2007-3847 ADV-2007-3020  View
284925 55991 CVE-2007-3847 ADV-2007-3095  View
284926 55991 CVE-2007-3847 ADV-2007-3283  View
284927 55991 CVE-2007-3847 ADV-2007-3494  View
284928 55991 CVE-2007-3847 ADV-2007-3955  View
284929 55991 CVE-2007-3847 ADV-2008-0233  View
284930 55991 CVE-2007-3847 ADV-2008-0924  View
284931 55991 CVE-2007-3847 ADV-2008-1697  View
284932 55991 CVE-2007-3847 https://issues.rpath.com/browse/RPL-1710  View
284933 55991 CVE-2007-3847 FEDORA-2007-707  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51975 JVNDB-2007-000638 Apache HTTP Server の mod_proxy モジュールにおけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server の mod_proxy モジュールには、modules/proxy/proxy_util.c において不正なデータヘッダを処理した際に、バッファ領域を超えて読み取りが実行されてしまうために、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-3847 27202 CVE-2007-3847 55991 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000638.html 2007-08-23 2013-07-18 View