中危 Apache Tomcat Connector mod_jk - 'exec-shield' Remote Exploit

CVE编号

CVE-2007-0774

利用情况

POC 已公开

补丁情况

官方补丁

披露时间

2007-03-05
漏洞描述
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.
解决建议
建议您更新当前系统或软件至最新版,完成漏洞的修复。
参考链接
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795
http://secunia.com/advisories/24398
http://secunia.com/advisories/24558
http://secunia.com/advisories/27037
http://secunia.com/advisories/28711
http://securitytracker.com/id?1017719
http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html
http://tomcat.apache.org/security-jk.html
http://www.cisco.com/en/US/products/products_security_advisory09186a008093f040.shtml
http://www.gentoo.org/security/en/glsa/glsa-200703-16.xml
http://www.redhat.com/support/errata/RHSA-2007-0096.html
http://www.securityfocus.com/archive/1/461734/100/0/threaded
http://www.securityfocus.com/bid/22791
http://www.vupen.com/english/advisories/2007/0809
http://www.vupen.com/english/advisories/2007/3386
http://www.vupen.com/english/advisories/2008/0331
http://www.zerodayinitiative.com/advisories/ZDI-07-008.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/32794
https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d7...
https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901b...
https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5...
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883a...
https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924...
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
应用 apache tomcat_jk_web_server_connector 1.2.19 -
运行在以下环境
应用 apache tomcat_jk_web_server_connector 1.2.20 -
运行在以下环境
系统 debian_10 libapache-mod-jk * Up to
(excluding)
1:1.2.21-1
运行在以下环境
系统 debian_11 libapache-mod-jk * Up to
(excluding)
1:1.2.21-1
运行在以下环境
系统 debian_12 libapache-mod-jk * Up to
(excluding)
1:1.2.21-1
运行在以下环境
系统 suse_12 apache2-mod_jk * Up to
(excluding)
1.2.40-1
阿里云评分
6.3
  • 攻击路径
    本地
  • 攻击复杂度
    复杂
  • 权限要求
    无需权限
  • 影响范围
    越权影响
  • EXP成熟度
    POC 已公开
  • 补丁情况
    官方补丁
  • 数据保密性
    数据泄露
  • 数据完整性
    无影响
  • 服务器危害
    无影响
  • 全网数量
    N/A
CWE-ID 漏洞类型
NVD-CWE-Other
阿里云安全产品覆盖情况