medium4.3Public exploit code
CVE-2007-6514
Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content su…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apache 2.2.6 (Windows) - Share PHP File Extension Mapping Information Disclosure2007-12-19 · remote · windows · Verified
Impact
Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing "\" (backslash), which is not handled by the intended AddType directive.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Http Server | Version 2.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/3479
- http://www.securityfocus.com/archive/1/485316/100/0/threaded
- http://www.securityfocus.com/bid/26939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39158
- http://securityreason.com/securityalert/3479
- http://www.securityfocus.com/archive/1/485316/100/0/threaded
- http://www.securityfocus.com/bid/26939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39158