CVE-2007-1862: Medium severity Apache HTTP Server vulnerability
Published Jun 4, 2007
·Updated
The recallheaders function in modmemcache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
Affected Software
1 affected component
Apache HTTP Server=2.2.4
Event History
Jun 4, 2007
CVE Published
11:30 PM
Jun 5, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1862?
CVE-2007-1862 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2007-1862?
To fix CVE-2007-1862, upgrade your Apache HTTP Server to version 2.2.5 or later.
3
What type of information can be exposed by CVE-2007-1862?
CVE-2007-1862 can potentially expose sensitive HTTP headers that may include previous header data.
4
Which version of Apache HTTP Server is affected by CVE-2007-1862?
Apache HTTP Server version 2.2.4 is affected by CVE-2007-1862.
5
Can CVE-2007-1862 be exploited remotely?
Yes, CVE-2007-1862 can be exploited by remote attackers to gain potentially sensitive information.