CVE-2007-3304 Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary pro...

Description

Affected products

References

• bugs.gentoo.org issue-tracking third-party-advisory
• bugzilla.redhat.com issue-tracking third-party-advisory
• HPSBUX02273 third-party-advisory vendor-advisory
• httpd.apache.org vendor-advisory
• httpd.apache.org vendor-advisory
• httpd.apache.org vendor-advisory
• [security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server mailing-list third-party-advisory
• [apache-httpd-dev] 20070629 Re: [PATCH] pid safety checks for 2.2.x mailing-list
• [apache-httpd-dev] 20070622 Re: PID table changes (was Re: svn commit: r547987 - in /httpd/httpd/trunk) issue-tracking mailing-list third-party-advisory
• 38939 broken-link vdb-entry
• RHSA-2007:0556 third-party-advisory vendor-advisory
• 25827 not-applicable third-party-advisory vendor-advisory
• 25830 not-applicable third-party-advisory vendor-advisory
• 25920 not-applicable third-party-advisory vendor-advisory
• 26211 not-applicable third-party-advisory vendor-advisory
• 26273 not-applicable third-party-advisory vendor-advisory
• 26443 not-applicable third-party-advisory vendor-advisory
• 26508 not-applicable third-party-advisory vendor-advisory
• 26611 not-applicable third-party-advisory vendor-advisory
• 26759 not-applicable third-party-advisory vendor-advisory
• 26790 not-applicable third-party-advisory vendor-advisory
• 26822 not-applicable third-party-advisory vendor-advisory
• 26842 not-applicable third-party-advisory vendor-advisory
• 26993 not-applicable third-party-advisory vendor-advisory
• 27121 not-applicable third-party-advisory
• 27209 not-applicable third-party-advisory
• 27563 not-applicable third-party-advisory
• 27732 not-applicable third-party-advisory
• 28212 not-applicable third-party-advisory
• 28224 not-applicable third-party-advisory
• 28606 not-applicable third-party-advisory
• GLSA-200711-06 third-party-advisory vendor-advisory
• security.psnc.pl third-party-advisory
• 2814 exploit third-party-advisory
• 103179 broken-link vendor-advisory
• 200032 broken-link vendor-advisory
• support.avaya.com third-party-advisory
• support.avaya.com third-party-advisory
• svn.apache.org third-party-advisory
• PK52702 third-party-advisory vendor-advisory
• PK53984 third-party-advisory vendor-advisory
• PK50467 third-party-advisory vendor-advisory
• www.fujitsu.com third-party-advisory
• MDKSA-2007:140 broken-link vendor-advisory
• MDKSA-2007:142 broken-link vendor-advisory
• SUSE-SA:2007:061 broken-link vendor-advisory
• FEDORA-2007-2214 mailing-list third-party-advisory vendor-advisory
• RHSA-2007:0532 third-party-advisory vendor-advisory
• RHSA-2007:0557 third-party-advisory vendor-advisory
• RHSA-2007:0662 third-party-advisory vendor-advisory
• RHSA-2008:0261 third-party-advisory vendor-advisory
• 20070529 Apache httpd vulenrabilities mailing-list third-party-advisory vdb-entry
• 20070619 Apache Prefork MPM vulnerabilities - Report mailing-list third-party-advisory vdb-entry
• 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server mailing-list third-party-advisory vdb-entry
• 24215 third-party-advisory vdb-entry
• 1018304 broken-link third-party-advisory vdb-entry
• 2007-0026 broken-link vendor-advisory
• USN-499-1 third-party-advisory vendor-advisory
• ADV-2007-2727 permissions-required vdb-entry
• ADV-2007-3100 permissions-required vdb-entry
• ADV-2007-3283 permissions-required vdb-entry
• ADV-2007-3420 permissions-required vdb-entry
• ADV-2007-3494 permissions-required vdb-entry
• ADV-2007-4305 permissions-required vdb-entry
• ADV-2008-0233 permissions-required vdb-entry
• apache-child-process-dos(35095) third-party-advisory vdb-entry
• issues.rpath.com broken-link
• [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/ mailing-list
• [httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/ mailing-list
• [httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ mailing-list
• [httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ mailing-list
• [httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• [httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ mailing-list
• [httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ mailing-list
• [httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list
• oval:org.mitre.oval:def:11589 signature third-party-advisory vdb-entry
• Debian Security Tracker CVE-2007-3304 vendor-advisory