CVE-2007-0086
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal
** IMPUGNADO ** El servidor HTTP Apache, cuando se accede a través de una conexión TCP con una gran tamaño de ventana, permite a atacantes remotos provocar una denegación de servicio (consumo de ancho de banda) a través de una cabecera Range que especifica múltiples copias del mismo fragmento. NOTA: la severidad de este asunto ha sido impugnado por terceras partes, que indican que el gran tamaño de ventana requierido para el ataque no es normalmente soportado o configurado por el servidor, o que un ataque DDoS-style lograría lo mismo.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-01-05 CVE Reserved
- 2007-01-05 CVE Published
- 2024-05-30 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (5)
URL | Tag | Source |
---|---|---|
http://osvdb.org/33456 | Broken Link | |
http://www.securityfocus.com/archive/1/455833/100/0/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/455879/100/0/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/455882/100/0/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/455920/100/0/threaded | Mailing List |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Apache Search vendor "Apache" | Http Server Search vendor "Apache" for product "Http Server" | - | - |
Affected
|