CVE-2007-6258 Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Ho...
HighCVSS 7.5
EPSS 41.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Host header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache mod jk | = 2.0 | No fix listed |
| apache mod jk | = 2.0.1 | No fix listed |
| apache mod jk | = 2.0.2 | No fix listed |
| apache mod jk | = 2.0.3_dev | No fix listed |
| f5 BIG-IP | = 9.2.3.30 | No fix listed |
References
- 3661 broken-link third-party-advisory
- www.ioactive.com third-party-advisory
- www.ioactive.com broken-link
- VU#771937 patch third-party-advisory us-government-resource
- 20080212 IOActive Security Advisory: Legacy mod_jk2 Buffer Overflow mailing-list third-party-advisory vdb-entry
- 27752 patch third-party-advisory vdb-entry
- ADV-2008-0572 url-repurposed vdb-entry
- 5330 exploit third-party-advisory vdb-entry
- 5386 exploit third-party-advisory vdb-entry