CVE-2007-0774

Related Files

Cisco Security Advisory 200080130-wcs

Posted Jan 31, 2008

Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - Apache Tomcat is the servlet container for JavaServlet and JavaServer Pages Web within the Cisco Wireless Control System (WCS). A vulnerability exists in the mod_jk.so URI handler within Apache Tomcat which, if exploited, may result in a remote code execution attack.

tags | advisory, remote, web, code execution

systems | cisco

advisories | CVE-2007-0774

SHA-256 | aa89f5c6940a3072b81f1d3d550fea6f0215b4cce41ab41998c9304ca904b58a

Download | Favorite | View

HP Security Bulletin 2007-14.47

Posted Oct 10, 2007

Authored by Hewlett Packard | Site hp.com

HP Security Bulletin - Potential security vulnerabilities have been identified with Apache running on HP-UX. The vulnerabilities could be exploited remotely via Cross Site Scripting (XSS) to execute arbitrary code.

tags | advisory, arbitrary, vulnerability, xss

systems | hpux

advisories | CVE-2005-2090, CVE-2006-5752, CVE-2007-0450, CVE-2007-0774, CVE-2007-1355, CVE-2007-1358, CVE-2007-1860, CVE-2007-1863, CVE-2007-1887, CVE-2007-1900, CVE-2007-2449, CVE-2007-2450, CVE-2007-2756, CVE-2007-2872, CVE-2007-3382, CVE-2007-3385, CVE-2007-3386

SHA-256 | 85ce851efccb71b60d9f0e47f9402e4ce2d6740afac5c78fc233d8379f869bc3

Download | Favorite | View

apache_modjk_overflow.rb.txt

Posted Jul 10, 2007

Authored by Nicob

Metasploit module for the buffer overflow vulnerability in Apache mod_jk version 1.2.20. Written to work on Win23.

tags | exploit, overflow

advisories | CVE-2007-0774

SHA-256 | efe145dee4b7080b59ab059e6c8b9dd4a32fc76e8f62346dc54be9192176437f

Download | Favorite | View

Gentoo Linux Security Advisory 200703-16

Posted Mar 20, 2007

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200703-16 - ZDI reported an unsafe memory copy in mod_jk that was discovered by an anonymous researcher in the map_uri_to_worker function of native/common/jk_uri_worker_map.c . Versions less than 1.2.21-r1 are affected.

tags | advisory

systems | linux, gentoo

advisories | CVE-2007-0774

SHA-256 | d3da7e86edad462a1c868e0fb757ade825afe7be96851cf5cecf78bad10ca192

Download | Favorite | View

Zero Day Initiative Advisory 07-08

Posted Mar 6, 2007

Authored by Tipping Point | Site zerodayinitiative.com

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apache Tomcat JK Web Server Connector. Authentication is not required to exploit this vulnerability. Tomcat JK Web Server Connector version 1.2.19 and 1.2.20 are affected. Tomcat 4.1.34 and 5.5.20 are affected.

tags | advisory, remote, web, arbitrary

advisories | CVE-2007-0774

SHA-256 | 90ac43490f4525e25bb3660c57860eb488ad69e34585be64b3e14e78e15b8b87

Download | Favorite | View