Vulnerability in Apache HTTP Server
CVE-2007-1741
Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root."
Vulnerability class: Race Condition
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.2 (Medium). Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.005 (41.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 42nd percentile — 41.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Apache HTTP Server — versions 2.2.3
Weakness classification (CWE)
Public proof-of-concept exploits
References
- osvdb.org/38639 (vdb-entry)
- labs.idefense.com/intelligence/vulnerabilities/display.php (Vendor Advisory, third-party-advisory)
- marc.info/ (mailing-list)
- exchange.xforce.ibmcloud.com/vulnerabilities/33584 (vdb-entry)
- www.securitytracker.com/id (vdb-entry)
- www.securityfocus.com/bid/23438 (vdb-entry)
- marc.info/ (Vendor Advisory, mailing-list)
Frequently asked questions
- What is CVE-2007-1741?
- CVE-2007-1741 is a vulnerability in Apache HTTP Server, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). Published 2007-04-13.
- Is CVE-2007-1741 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.