Unscored severity · published Jun 20, 2007
CVE-2007-3303
Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences executed in a worker process that (1) stop…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences executed in a worker process that (1) stop request processing by killing all worker processes and preventing creation of replacements or (2) hang the system by forcing the master process to fork an arbitrarily large number of worker processes. NOTE: This might be an inherent design limitation of Apache with respect to worker processes in hosted environments.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HS
HTTP Server · Apache
2.0.59; 2.2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3303
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3303
osvdb.org
http://osvdb.org/37050
security.psnc.pl
http://security.psnc.pl/files/apache_report.pdf
securityreason.com
http://securityreason.com/securityalert/2814
www.securityfocus.com
http://www.securityfocus.com/archive/1/469899/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/471832/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/24215
More from HTTP Server
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
9.8
CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
9.1
CVE-2024-38475
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
9.0
CVE-2021-40438
mod_proxy SSRF
7.8
CVE-2019-0211
Apache HTTP Server Privilege Escalation Vulnerability