CVE-2007-6420: CSRF
Published Jan 12, 2008
·Updated
Cross-site request forgery (CSRF) vulnerability in the balancer-manager in modproxybalancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.
Affected Software
11 affected components
Apache HTTP Server=2.2.0
Apache HTTP Server=2.2.2
Apache HTTP Server=2.2.4
Apache HTTP Server=2.2.6
Apache HTTP Server=2.2.3
Apache HTTP Server
Apache HTTP Server=2.2.5
Apache HTTP Server=2.2.8
Canonical Ubuntu Linux=6.06
Canonical Ubuntu Linux=7.10
Canonical Ubuntu Linux=8.04
Remediation
Patch Available
Event History
Jan 12, 2008
CVE Published
12:46 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6420?
CVE-2007-6420 is classified as a moderate severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2007-6420?
To fix CVE-2007-6420, users should upgrade to the latest version of Apache HTTP Server that has addressed this vulnerability.
3
What type of vulnerability is CVE-2007-6420?
CVE-2007-6420 is a cross-site request forgery (CSRF) vulnerability affecting the balancer-manager in Apache HTTP Server.
4
Which versions of Apache HTTP Server are affected by CVE-2007-6420?
CVE-2007-6420 affects Apache HTTP Server versions 2.2.x.
5
Can CVE-2007-6420 allow remote attackers to gain unnecessary privileges?
Yes, CVE-2007-6420 allows remote attackers to potentially gain unauthorized privileges via CSRF.