CVE-2007-3304

State: Published
Severity: Not scored
Published: Jun 20, 2007
Updated: Aug 7, 2024
Reserved: Jun 20, 2007

Description

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

28606third-party-advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245111
MDKSA-2007:142vendor-advisory
26822third-party-advisory
ADV-2007-4305vdb-entry
ADV-2007-3420vdb-entry
RHSA-2007:0557vendor-advisory
38939vdb-entry
PK52702vendor-advisory
MDKSA-2007:140vendor-advisory
HPSBUX02273vendor-advisory
25827third-party-advisory
25920third-party-advisory
26993third-party-advisory
28212third-party-advisory
http://security.psnc.pl/files/apache_report.pdf
1018304vdb-entry
27563third-party-advisory
27732third-party-advisory
http://svn.apache.org/viewvc?view=rev&revision=547987
103179vendor-advisory
27209third-party-advisory
RHSA-2007:0662vendor-advisory
26790third-party-advisory
RHSA-2007:0556vendor-advisory
http://httpd.apache.org/security/vulnerabilities_20.html
SUSE-SA:2007:061vendor-advisory
20070529 Apache httpd vulenrabilitiesmailing-list
FEDORA-2007-2214vendor-advisory
[apache-httpd-dev] 20070622 Re: PID table changes (was Re: svn commit: r547987 - in /httpd/httpd/trunk)mailing-list
26759third-party-advisory
ADV-2007-3494vdb-entry
PK50467vendor-advisory
2007-0026vendor-advisory
RHSA-2007:0532vendor-advisory
http://httpd.apache.org/security/vulnerabilities_22.html
https://issues.rpath.com/browse/RPL-1710
[apache-httpd-dev] 20070629 Re: [PATCH] pid safety checks for 2.2.xmailing-list
20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Servermailing-list
2814third-party-advisory
oval:org.mitre.oval:def:11589vdb-entrysignature
27121third-party-advisory
20070619 Apache Prefork MPM vulnerabilities - Reportmailing-list
ADV-2008-0233vdb-entry
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html
26211third-party-advisory
apache-child-process-dos(35095)vdb-entry
26443third-party-advisory
[security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Servermailing-list
http://httpd.apache.org/security/vulnerabilities_13.html
GLSA-200711-06vendor-advisory
28224third-party-advisory
200032vendor-advisory
25830third-party-advisory
24215vdb-entry
http://support.avaya.com/elmodocs2/security/ASA-2007-363.htm
USN-499-1vendor-advisory
RHSA-2008:0261vendor-advisory
26508third-party-advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-353.htm
26842third-party-advisory
ADV-2007-3283vdb-entry
PK53984vendor-advisory
ADV-2007-2727vdb-entry
26611third-party-advisory
26273third-party-advisory
http://bugs.gentoo.org/show_bug.cgi?id=186219
ADV-2007-3100vdb-entry
[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/mailing-list
[httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.