Unscored severity · published Jun 4, 2007
CVE-2007-1862
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously…
–
CVSS
6.1%
EPSS
No
On KEV
Description
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.1% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HS
HTTP Server · Apache
2.2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1862
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1862
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=186219
httpd.apache.org
http://httpd.apache.org/security/vulnerabilities_22.html
issues.apache.org
http://issues.apache.org/bugzilla/show_bug.cgi?id=41551
osvdb.org
http://osvdb.org/38641
people.apache.org
http://people.apache.org/~covener/2.2.x-mod_memcache-poolmgmt.diff
secunia.com
http://secunia.com/advisories/26273
More from HTTP Server
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
9.8
CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
9.1
CVE-2024-38475
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
9.0
CVE-2021-40438
mod_proxy SSRF
7.8
CVE-2019-0211
Apache HTTP Server Privilege Escalation Vulnerability