CVE-2007-3303: Code Injection
Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences executed in a worker process that (1) stop request processing by killing all worker processes and preventing creation of replacements or (2) hang the system by forcing the master process to fork an arbitrarily large number of worker processes. NOTE: This might be an inherent design limitation of Apache with respect to worker processes in hosted environments.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3303?
CVE-2007-3303 is classified as a denial of service vulnerability that impacts Apache HTTP Server.
How do I fix CVE-2007-3303?
To fix CVE-2007-3303, you should upgrade to the latest version of Apache HTTP Server that addresses this vulnerability.
What versions of Apache are affected by CVE-2007-3303?
CVE-2007-3303 affects Apache HTTP Server versions 2.0.59 and 2.2.4.
Can CVE-2007-3303 be exploited remotely?
CVE-2007-3303 requires local access to exploit, making it less of a risk from remote attackers.
What are the potential impacts of CVE-2007-3303?
The impact of CVE-2007-3303 includes the ability to stop request processing and cause the server to hang.