CVE-2007-6420

Apache HTTP Server 2.2.x - CSRF

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.

References (31)

[Mailing List] http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

[Broken Link] http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html

[Third Party Advisory] http://marc.info/?l=bugtraq&m=123376588623823&w=2

[Not Applicable] http://secunia.com/advisories/31026

[Not Applicable] http://secunia.com/advisories/32222

[Not Applicable] http://secunia.com/advisories/33797

[Not Applicable] http://secunia.com/advisories/34219

[Third Party Advisory] http://security.gentoo.org/glsa/glsa-200807-06.xml

[Third Party Advisory] http://securityreason.com/securityalert/3523

[Third Party Advisory] http://support.apple.com/kb/HT3216

[Third Party Advisory] http://www.redhat.com/support/errata/RHSA-2008-0966.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/486169/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/494858/100/0/threaded

[Patch, Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/27236

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/31681

[Third Party Advisory] http://www.ubuntu.com/usn/USN-731-1

[Permissions Required] http://www.vupen.com/english/advisories/2008/2780

[Permissions Required] http://www.vupen.com/english/advisories/2009/0320

[Patch, Vendor Advisory] https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E

[Patch, Vendor Advisory] https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E

... and 11 more

Scores

EPSS 0.0521

EPSS Percentile 89.8%

Classification

CWE

CWE-352

Status draft

Affected Products (10)

apache/http_server

canonical/ubuntu_linux

Timeline

Published Jan 12, 2008

Tracked Since Feb 18, 2026