Vulnerability in Apache Tomcat Jk Web Server Connector
CVE-2007-0774
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.816 (99.6th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.815 · newest: 0.816 · change: +0.001
Affected products
- Apache Tomcat Jk Web Server Connector — versions 1.2.19, 1.2.20
Public proof-of-concept exploits
References
- tomcat.apache.org/connectors-doc/miscellaneous/changelog.html (Patch)
- www.redhat.com/support/errata/RHSA-2007-0096.html (vendor-advisory)
- www.vupen.com/english/advisories/2007/0809 (vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/32794 (vdb-entry)
- secunia.com/advisories/24558 (third-party-advisory)
- securitytracker.com/id (vdb-entry)
- www.securityfocus.com/archive/1/461734/100/0/threaded (mailing-list)
- secunia.com/advisories/24398 (third-party-advisory)
- www.cisco.com/en/US/products/products_security_advisory09186a008093f040.shtml (vendor-advisory)
- www.zerodayinitiative.com/advisories/ZDI-07-008.html (Vendor Advisory)
Frequently asked questions
- What is CVE-2007-0774?
- CVE-2007-0774 is a vulnerability in Apache Tomcat Jk Web Server Connector. Published 2007-03-04.
- Is CVE-2007-0774 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.