vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2007-1863

N/A
Published: June 27, 2007 at 05:00 PM UTC
Updated: June 16, 2026 at 10:38 PM UTC
2 products affected across 2 vendorsMac OS X ServerHTTP Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 12%

Description

cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

HTTP Server· Apache
95%
2.0.37 ≤ v < 2.0.612.2.0 ≤ v < 2.2.6
Affected range stops below 2.0.61, so it looks safe — our inference, not a vendor statement
Affected range stops below 2.2.6, so it looks safe — our inference, not a vendor statement
Mac OS X Server· Apple
95%
10.010.110.1.110.1.210.1.310.1.410.1.510.210.2.110.2.210.2.310.2.410.2.510.2.610.2.710.2.810.310.3.110.3.210.3.310.3.410.3.510.3.610.3.710.3.810.3.910.410.4.110.4.210.4.310.4.410.4.510.4.610.4.710.4.810.4.9

References (65)

x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://bugs.gentoo.org/show_bug.cgi?id=186219
x_refsource_MISCIssue Tracking
Source: [email protected]
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244658
Vendor Advisoryx_refsource_HPBroken Link
Source: [email protected]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://httpd.apache.org/security/vulnerabilities_20.html
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://httpd.apache.org/security/vulnerabilities_22.html
Vendor Advisoryx_refsource_APPLEThird Party Advisory
Source: [email protected]
http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
Mailing Listx_refsource_MLISTThird Party AdvisoryVDB Entry
Source: [email protected]
http://lists.vmware.com/pipermail/security-announce/2009/000062.html
VDB Entryx_refsource_OSVDBBroken Link
Source: [email protected]
http://osvdb.org/37079

CVSS

5MEDIUM[email protected]
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card