Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-3304
HistoryJun 20, 2007 - 12:00 a.m.

CVE-2007-3304

2007-06-2000:00:00
ubuntu.com
ubuntu.com
9

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

10.4%

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows
local users to cause a denial of service by modifying the worker_score and
process_score arrays to reference an arbitrary process ID, which is sent a
SIGUSR1 signal from the master process, aka β€œSIGUSR1 killer.”

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchapache2<Β 2.0.55-4ubuntu2.2UNKNOWN
ubuntu6.10noarchapache2<Β 2.0.55-4ubuntu4.1UNKNOWN
ubuntu7.04noarchapache2<Β 2.2.3-3.2ubuntu0.1UNKNOWN

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

10.4%