CVE-2007-6423 Memory corruption in n/a
Remote attackers can trigger memory corruption in Apache mod_proxy_balancer on Windows via long URLs, potentially causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-6423?
CVE-2007-6423 is a high-severity memory corruption vulnerability in Apache Http Server, published on 12 Jan 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corruption via a long URL. NOTE: the vendor could not reproduce this issue
Weakness: CWE-399
Which versions are affected by CVE-2007-6423?
It affects 1 product.
Products include Apache Http Server.
How do I fix CVE-2007-6423?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2007-6423 being exploited?
There is no known exploitation of CVE-2007-6423 in the wild and no public exploit code.
Other vulnerabilities in Apache Http Server
Sources
Also known as GHSA-f5gq-mm82-r92q, MINI-f882-h975-6j3r.