First published: Wed Jun 20 2007(Updated: )
Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences executed in a worker process that (1) stop request processing by killing all worker processes and preventing creation of replacements or (2) hang the system by forcing the master process to fork an arbitrarily large number of worker processes. NOTE: This might be an inherent design limitation of Apache with respect to worker processes in hosted environments.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apache HTTP Server | =2.2.4 | |
Apache HTTP Server | =2.0.59 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-3303 is classified as a denial of service vulnerability that impacts Apache HTTP Server.
To fix CVE-2007-3303, you should upgrade to the latest version of Apache HTTP Server that addresses this vulnerability.
CVE-2007-3303 affects Apache HTTP Server versions 2.0.59 and 2.2.4.
CVE-2007-3303 requires local access to exploit, making it less of a risk from remote attackers.
The impact of CVE-2007-3303 includes the ability to stop request processing and cause the server to hang.