CVE-2007-0086

CVSS V2 High 7.8 CVSS V3 None
Description
** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal.
Overview
  • CVE ID
  • CVE-2007-0086
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2007-01-05T18:28:00
  • Last Modified Date
  • 2021-04-21T14:46:07
Weakness Enumerations
CWE URL
CWE-400 http://cwe.mitre.org/data/definitions/400.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:N/I:N/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 7.8
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.9
References
Reference URL Reference Tags
http://www.securityfocus.com/archive/1/455879/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/455920/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/455882/100/0/threaded Third Party Advisory VDB Entry
http://osvdb.org/33456 Broken Link
http://www.securityfocus.com/archive/1/455833/100/0/threaded Third Party Advisory VDB Entry
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2007-0086
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0086
History
Created Old Value New Value Data Type Notes
2022-05-10 07:15:00 Added to TrackCVE