CVE-2007-0450Exploit(apache / http_server)

LOWCVSS 5.0 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for apache http_server systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.

apache CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

http_server
tomcat

Threat summary

Public PoC and exploit tooling are both present
1 mentions across 1 observed day

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

apache

Products

http_servertomcat

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Exploit

1100.0%

Referenced assets1 URL

By indicator

https://hackerone.com/reports/502758

Full discourse1 post

André Baptista@0xacb247d
Exploit
404 page to RCE. A report by @spaceraccoonsec He chained two old CVEs to achieve RCE: - Found a 404 page mentioning an obscure CMS, discovered /josso/signin login - Triggered CVE-2007-0450 (directory traversal in mod_proxy) using a %5C../ to bypass the internal proxy - Reached an unprotected JBoss web console on localhost (CVE-2007-1036) - Exploited Java deserialization with jexboss tool for full RCE Full report 👇 https://hackerone.com/reports/502758
Post summary
The report details chaining CVE‑2007‑0450 and CVE‑2007‑1036 to achieve RCE using the jexboss tool for Java deserialization, but does not mention active exploitation or available patches.
1288173750836.1K
18.7K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	apache	http_server	-	-	-
App	apache	tomcat	-	-	-

Explore more

Back to dashboard apache CVEs http_server vulnerabilities