CVE-2007-1741

Apache HTTP Server 2.2.3 - Local Privilege Escalation via Race Condition in suexec

Title source: llm

Description

Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root."

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/38639

Vendor Advisory third-party-advisory x_refsource_idefense

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=511

Mailing List mailing-list x_refsource_mlist

http://marc.info/?l=apache-httpd-dev&m=117511834512138&w=2

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/33584

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1017904

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/23438

Vendor Advisory mailing-list x_refsource_mlist

http://marc.info/?l=apache-httpd-dev&m=117511568709063&w=2

Scores

EPSS 0.0052

EPSS Percentile 39.9%

Details

CWE

CWE-362

Status published

Products (1)

apache/http_server 2.2.3

Published Apr 13, 2007

Tracked Since Feb 18, 2026