httpd scoreboard lack of PID protection
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Certificate System 7.3 | |||
| ant-0:1.6.5-1jpp_1rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| avalon-logkit-0:1.2-2jpp_4rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| axis-0:1.2.1-1jpp_3rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| classpathx-jaf-0:1.0-2jpp_6rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| classpathx-mail-0:1.1.1-2jpp_8rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| geronimo-specs-0:1.0-0.M4.1jpp_10rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| jakarta-commons-modeler-0:2.0-3jpp_2rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| log4j-0:1.2.12-1jpp_1rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| mx4j-1:3.0.1-1jpp_4rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| pcsc-lite-0:1.3.3-3.el4 | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| rhpki-ca-0:7.3.0-20.el4 | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| rhpki-java-tools-0:7.3.0-10.el4 | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| rhpki-kra-0:7.3.0-14.el4 | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| rhpki-manage-0:7.3.0-19.el4 | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| rhpki-native-tools-0:7.3.0-6.el4 | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| rhpki-ocsp-0:7.3.0-13.el4 | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| rhpki-tks-0:7.3.0-13.el4 | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| tomcat5-0:5.5.23-0jpp_4rh.16 | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| xerces-j2-0:2.7.1-1jpp_1rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| xml-commons-0:1.3.02-2jpp_1rh | cpe:/a:redhat:certificate_system:7.3 | RHSA-2010:0602 | 2010-08-04T00:00:00Z |
| Red Hat Enterprise Linux 2.1 | |||
| apache-0:1.3.27-12.ent | cpe:/o:redhat:enterprise_linux:2.1 | RHSA-2007:0532 | 2007-06-26T00:00:00Z |
| Red Hat Enterprise Linux 3 | |||
| httpd-0:2.0.46-68.ent | cpe:/o:redhat:enterprise_linux:3 | RHSA-2007:0662 | 2007-07-13T00:00:00Z |
| Red Hat Enterprise Linux 4 | |||
| httpd-0:2.0.52-32.3.ent | cpe:/o:redhat:enterprise_linux:4 | RHSA-2007:0662 | 2007-07-13T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| httpd-0:2.2.3-7.el5 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2007:0556 | 2007-06-26T00:00:00Z |
| Red Hat Network Proxy v 4.2 (RHEL 3) | |||
| jabberd-0:2.0s10-3.37.rhn | cpe:/a:redhat:network_proxy:4.2::el3 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel3 | cpe:/a:redhat:network_proxy:4.2::el3 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel3 | cpe:/a:redhat:network_proxy:4.2::el3 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| Red Hat Network Proxy v 4.2 (RHEL 4) | |||
| jabberd-0:2.0s10-3.38.rhn | cpe:/a:redhat:network_proxy:4.2::el4 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel4 | cpe:/a:redhat:network_proxy:4.2::el4 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel4 | cpe:/a:redhat:network_proxy:4.2::el4 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| Red Hat Network Proxy v 5.0 | |||
| jabberd-0:2.0s10-3.38.rhn | cpe:/a:redhat:network_proxy:5.0::el4 | RHSA-2008:0263 | 2008-05-20T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel4 | cpe:/a:redhat:network_proxy:5.0::el4 | RHSA-2008:0263 | 2008-05-20T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel4 | cpe:/a:redhat:network_proxy:5.0::el4 | RHSA-2008:0263 | 2008-05-20T00:00:00Z |
| Red Hat Network Satellite Server v 4.2 | |||
| jabberd-0:2.0s10-3.38.rhn | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| jfreechart-0:0.9.20-3.rhn | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| openmotif21-0:2.1.30-11.RHEL4.6 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| perl-Crypt-CBC-0:2.24-1.el4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modjk-0:1.2.23-2rhn.rhel4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modssl-0:2.8.12-8.rhn.10.rhel4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| tomcat5-0:5.0.30-0jpp_10rh | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| Red Hat Network Satellite Server v 4.2 (RHEL3) | |||
| jabberd-0:2.0s10-3.37.rhn | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| jfreechart-0:0.9.20-3.rhn | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| openmotif21-0:2.1.30-9.RHEL3.8 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| perl-Crypt-CBC-0:2.24-1.el3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modjk-0:1.2.23-2rhn.rhel3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modssl-0:2.8.12-8.rhn.10.rhel3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| tomcat5-0:5.0.30-0jpp_10rh | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| Red Hat Network Satellite Server v 5.0 | |||
| jabberd-0:2.0s10-3.38.rhn | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| jfreechart-0:0.9.20-3.rhn | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| openmotif21-0:2.1.30-11.RHEL4.6 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| perl-Crypt-CBC-0:2.24-1.el4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| rhn-modjk-0:1.2.23-2rhn.rhel4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| rhn-modssl-0:2.8.12-8.rhn.10.rhel4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| tomcat5-0:5.0.30-0jpp_10rh | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| Red Hat Web Application Stack for RHEL 4 | |||
| httpd-0:2.0.59-1.el4s1.7 | cpe:/a:redhat:rhel_application_stack:1 | RHSA-2007:0557 | 2007-07-13T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2007-3294 | Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer." |
Ubuntu USN |
USN-499-1 | Apache vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 3.3% (3.298% probability within 30 days)
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|