CVE-2007-1862

Description

The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.

Risk Information

Base Score

7.5

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

10.659

Associated Vulnerability

Vulnerability	OS Platform
Update Apache to version 2.2.3	Windows
Vulnerabilities CVE-2007-1862 are fixed in Apache 2.2.6	Windows
Multiple vulnerabilities are affected in Oracle HTTP Server 5.0	Windows
Update Apache to version 2.2.3 (For Linux)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234