CVE-2007-3304: Medium severity Apache HTTP Server vulnerability
Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the workerscore and processscore arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3304?
CVE-2007-3304 is classified as a medium severity vulnerability that can lead to denial of service.
How do I fix CVE-2007-3304?
To fix CVE-2007-3304, it is recommended to upgrade Apache HTTP Server to version 2.2.6 or later, 2.0.61 or later, or 1.3.39 or later.
What does CVE-2007-3304 affect?
CVE-2007-3304 affects Apache HTTP Server versions 1.3.37, 2.0.59, and 2.2.4 when using the Prefork MPM module.
What is the impact of CVE-2007-3304?
The impact of CVE-2007-3304 is that local users can cause a denial of service by sending a SIGUSR1 signal to an arbitrary process.
Who is affected by CVE-2007-3304?
Local users on systems running vulnerable versions of Apache HTTP Server are potentially affected by CVE-2007-3304.