Debian/apache2: unknown

suexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root, which might allow local users to perform unauthorized oper

Action: Upgrade apache2 to 2.2.8-5 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1742
• https://security-tracker.debian.org/tracker/CVE-2007-1742

published 2007-04-13T17:19:00Z · modified 2026-10-21T17:47:38.534597086Z · JSON