Rapid7 Vulnerability & Exploit Database

SUSE Linux Security Vulnerability: CVE-2007-1862

Back to Search

SUSE Linux Security Vulnerability: CVE-2007-1862

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
06/04/2007
Created
07/25/2018
Added
12/12/2013
Modified
07/04/2017

Description

The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.

Solution(s)

  • suse-upgrade-apache2
  • suse-upgrade-apache2-devel
  • suse-upgrade-apache2-doc
  • suse-upgrade-apache2-example-pages
  • suse-upgrade-apache2-prefork
  • suse-upgrade-apache2-utils
  • suse-upgrade-apache2-worker
  • suse-upgrade-suse-release

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;