CVE-2007-6750

Apache HTTP Server < 2.2.15 - Denial of Service via Partial HTTP Requests

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-6750. PoCs published by sarjanpatel22.

AI-analyzed exploit summary This repository documents a blue-team SIEM lab setup using Wazuh 4.7.5 to detect simulated attacks, including a Slowloris DoS (CVE-2007-6750) against Apache. The report provides technical details on attack simulation, detection metrics, and mitigation recommendations, but does not contain exploit code.

Description

The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.

Exploits (1)

nomisec WRITEUP

by sarjanpatel22 · poc

https://github.com/sarjanpatel22/siem-threat-detection-lab

View Code ZIP pw:eip

This repository documents a blue-team SIEM lab setup using Wazuh 4.7.5 to detect simulated attacks, including a Slowloris DoS (CVE-2007-6750) against Apache. The report provides technical details on attack simulation, detection metrics, and mitigation recommendations, but does not contain exploit code.

Classification

Writeup 98%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: Apache (vulnerable to CVE-2007-6750)

No auth needed

Prerequisites: Apache server without mod_reqtimeout enabled · Network access to target · slowhttptest tool for simulation

MITRE ATT&CK