Vulnerability in Apache HTTP Server
CVE-2007-1741
Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root."
Vulnerability class: Race Condition
EPSS: 0.005 (40.9th percentile) — read the EPSS interpretation.
Affected products
- Apache Http_server — versions 2.2.3
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
- secalert@redhat.com (x_refsource_IDEFENSE, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (Vendor Advisory, mailing-list, x_refsource_MLIST)
Frequently asked questions
- What is CVE-2007-1741?
- CVE-2007-1741 is a vulnerability in Apache HTTP Server, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). Published 2007-04-13.
- Is CVE-2007-1741 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.