CVE-2007-4465
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2...
4.3 MediumFix available
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
Exploit likelihood
26.2%Up 18.8 points since Feb 4, 2022
What each source reports
CVE List
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
- Record
CVE-2007-4465- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
EUVDEUVD-2007-4448
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
- Record
EUVD-2007-4448- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7286-985c-74qv
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2...
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
- Record
GHSA-7286-985c-74qv- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
NVD
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
- Record
CVE-2007-4465- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVBELL-CVE-2007-4465
CVE-2007-4465 does not affect BellSoft software
- Record
BELL-CVE-2007-4465- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-4465
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
- Record
DEBIAN-CVE-2007-4465- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSV No score
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
- Record
CVE-2007-4465- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10623-1 No score
apache2-2.4.49-1.1 on GA media
These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10623-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.2.6-1 | 2.2.6-1 |
apache2Debian:13 |
before 2.2.6-1 | 2.2.6-1 |
apache2Debian:14 |
before 2.2.6-1 | 2.2.6-1 |
httpdRed Hat:rhel_application_stack:1 From an advisory covering 2 CVEs |
before 0:2.0.59-1.el4s1.8 | 0:2.0.59-1.el4s1.8 |
httpd-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 2 CVEs |
before 0:2.0.59-1.el4s1.8 | 0:2.0.59-1.el4s1.8 |
httpd-develRed Hat:rhel_application_stack:1 From an advisory covering 2 CVEs |
before 0:2.0.59-1.el4s1.8 | 0:2.0.59-1.el4s1.8 |
httpd-manualRed Hat:rhel_application_stack:1 From an advisory covering 2 CVEs |
before 0:2.0.59-1.el4s1.8 | 0:2.0.59-1.el4s1.8 |
mod_sslRed Hat:rhel_application_stack:1 From an advisory covering 2 CVEs |
before 1:2.0.59-1.el4s1.8 | 1:2.0.59-1.el4s1.8 |
apacheRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
Show 144 moreShow less
| Package | Affected | Fixed |
|---|---|---|
apache-manualRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apacheRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apacheRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apacheRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
httpdRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpdRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
mod_sslRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 1:2.2.3-11.el5_1.3 | 1:2.2.3-11.el5_1.3 |
httpdRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-manualRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
mod_sslRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:2.2.3-11.el5_1.3 | 1:2.2.3-11.el5_1.3 |
jabberdRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_proxy:4.2::el3 From an advisory covering 12 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
rhn-apacheRed Hat:network_proxy:4.2::el3 From an advisory covering 12 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modperlRed Hat:network_proxy:4.2::el3 From an advisory covering 12 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
jabberdRed Hat:network_proxy:4.2::el4 From an advisory covering 12 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
rhn-apacheRed Hat:network_proxy:4.2::el4 From an advisory covering 12 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modperlRed Hat:network_proxy:4.2::el4 From an advisory covering 12 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
jabberdRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
jfreechartRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.24-1.el3 | 0:2.24-1.el3 |
rhn-apacheRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel3 | 0:1.2.23-2rhn.rhel3 |
rhn-modperlRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
rhn-modsslRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel3 | 0:2.8.12-8.rhn.10.rhel3 |
tomcat5Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
antRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
apache2openSUSE:Tumbleweed From an advisory covering 27 CVEs |
before 2.4.49-1.1 | 2.4.49-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4465 is a medium vulnerability (CVSS 4.3) in Apache Http Server, published September 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 26.2%, the 98th percentile. Fixed in apache2 2.2.6-1.
References
redhat.com/support/errata/RHSA-2008-0005.html
securityreason.com/securityalert/3113
secunia.com/advisories/28749
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6089
marc.info?l=bugtraq&m=125631037611762&w=2
Show 194 moreShow less
securityfocus.com/bid/25653
securitytracker.com/id?1019194
us-cert.gov/cas/techalerts/TA08-150A.html
novell.com/linux/security/advisories/2007_61_apache2.html
mandriva.com/security/advisories?name=MDVSA-2008:014
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432
apache.org/dist/httpd/CHANGES_2.2.6
lists.apple.com/archives/security-announce/2008//May/msg00001.html
support.avaya.com/elmodocs2/security/ASA-2008-032.htm
exchange.xforce.ibmcloud.com/vulnerabilities/36586
fujitsu.com/global/support/software/security/products-f/interstage-200807e.html
security.gentoo.org/glsa/glsa-200711-06.xml
vupen.com/english/advisories/2008/1697
ubuntu.com/usn/usn-575-1
bugs.gentoo.org/show_bug.cgi?id=186219
nvd.nist.gov/vuln/detail/CVE-2007-4465
github.com/advisories/GHSA-7286-985c-74qv
docs.bell-sw.com/security/cves/CVE-2007-4465
security-tracker.debian.org/tracker/CVE-2007-4465
access.redhat.com/errata/RHSA-2007:0911
bugzilla.redhat.com/show_bug.cgi?id=250731
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0911.json
cve.org/CVERecord?id=CVE-2007-3847
suse.com/security/cve/CVE-2005-3352
This page doesn't list everything
Left out here: 163 references. The JSON record has them.