{"id":"CVE-2007-0774","aliases":["DEBIAN-CVE-2007-0774","EUVD-2007-0771","GHSA-5cwp-c46g-8v55","RHSA-2007:0096","RHSA-2007:0164","openSUSE-SU-2024:10625-1"],"status":"published","title":"Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c)...","description":"Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.81627,"percentile":0.99644,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2007-03-04T22:00:00Z","modified":"2026-10-21T17:47:37Z","exploits":[{"source":"metasploit","id":"exploit/windows/http/apache_modjk_overflow","title":"Apache mod_jk 1.2.20 Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-03-02","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/http/apache_modjk_overflow"},{"source":"exploitdb","id":"EDB-4162","title":"Apache Tomcat Connector mod_jk - 'exec-shield' Remote Overflow","type":"remote","platform":"linux","date":"2007-07-08","verified":true,"url":"https://www.exploit-db.com/exploits/4162"},{"source":"exploitdb","id":"EDB-16798","title":"Apache Tomcat mod_jk 1.2.20 - Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-07-25","verified":true,"url":"https://www.exploit-db.com/exploits/16798"}],"fixes":[{"ecosystem":"Debian:12","package":"libapache-mod-jk","fixed_in":["1:1.2.21-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libapache-mod-jk","fixed_in":["1:1.2.21-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libapache-mod-jk","fixed_in":["1:1.2.21-1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_application_stack:1","package":"mod_jk","fixed_in":["0:1.2.20-1.el4s1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_application_stack:1","package":"mod_jk-ap20","fixed_in":["0:1.2.20-1.el4s1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_application_stack:1","package":"mod_jk-debuginfo","fixed_in":["0:1.2.20-1.el4s1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_application_stack:1","package":"mod_jk-manual","fixed_in":["0:1.2.20-1.el4s1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_application_server:2","package":"mod_jk","fixed_in":["0:1.2.20-1jpp_1rh"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_application_server:2","package":"mod_jk-ap20","fixed_in":["0:1.2.20-1jpp_1rh"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_application_server:2","package":"mod_jk-debuginfo","fixed_in":["0:1.2.20-1jpp_1rh"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_application_server:2","package":"mod_jk-manual","fixed_in":["0:1.2.20-1jpp_1rh"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libapache-mod-jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.21-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libapache-mod-jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.21-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libapache-mod-jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.21-1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:1","package":"mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.20-1.el4s1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:1","package":"mod_jk-ap20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.20-1.el4s1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:1","package":"mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.20-1.el4s1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:1","package":"mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.20-1.el4s1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_application_server:2","package":"mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.20-1jpp_1rh"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_application_server:2","package":"mod_jk-ap20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.20-1jpp_1rh"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_application_server:2","package":"mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.20-1jpp_1rh"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_application_server:2","package":"mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.20-1jpp_1rh"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.48-2.9"}]}],"bundled":3}],"products":[{"vendor":"apache","product":"tomcat_jk_web_server_connector"}],"references":[{"url":"http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0096.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2007/0809","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32794","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://secunia.com/advisories/24558","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://securitytracker.com/id?1017719","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/461734/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://secunia.com/advisories/24398","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008093f040.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-008.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/3386","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5513","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://secunia.com/advisories/27037","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/28711","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://tomcat.apache.org/security-jk.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2008/0331","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/22791","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200703-16.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0774","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925@%3Cdev.tomcat.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4@%3Cdev.tomcat.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935@%3Cdev.tomcat.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c@%3Cdev.tomcat.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d@%3Cdev.tomcat.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-5cwp-c46g-8v55"},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-0774","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:0096","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=230045","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0096.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-0774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618272","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0774","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:0164","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=236182","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0164.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1323","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2007-0774","description":"Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.","status":"published","published":"2007-03-04T22:00:00Z","modified":"2024-08-07T12:34:20.277Z","updated_at":"2026-11-02T13:34:03.879328Z"}],"euvd":[{"id":"EUVD-2007-0771","description":"Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.","status":"published","published":"2007-03-04T22:00:00Z","modified":"2024-08-07T12:34:20Z","updated_at":"2026-11-03T01:38:28.771987Z"}],"ghsa":[{"id":"GHSA-5cwp-c46g-8v55","title":"Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c)...","description":"Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.","status":"published","published":"2022-05-01T17:47:02Z","modified":"2023-02-20T05:06:15Z","updated_at":"2026-11-02T14:54:11.398505Z"}],"nvd":[{"id":"CVE-2007-0774","description":"Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.","status":"published","published":"2007-03-04T22:19:00Z","modified":"2026-06-16T22:36:15.513Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:13.98711Z"}],"osv":[{"id":"CVE-2007-0774","description":"Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.","status":"published","published":"2007-03-04T22:19:00Z","modified":"2026-04-10T03:38:41.400243Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2007-0774","description":"Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.","status":"published","published":"2007-03-04T22:19:00Z","modified":"2026-10-21T17:47:37.933863946Z","updated_at":"2026-11-02T15:45:23.105674Z"},{"id":"openSUSE-SU-2024:10625-1","title":"apache2-mod_jk-1.2.48-2.9 on GA media","description":"These are all security issues fixed in the apache2-mod_jk-1.2.48-2.9 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:58:49.297858Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2007:0096","title":"Red Hat Security Advisory: mod_jk security update","status":"published","published":"2024-09-15T16:36:25Z","modified":"2025-11-22T10:10:46Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2007:0164","title":"Red Hat Security Advisory: mod_jk security update","status":"published","published":"2024-09-15T16:36:30Z","modified":"2026-06-26T10:06:02Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}