CVE-2007-0774

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

81.51%

Published

Mar 4, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBApache Tomcat Connector mod_jk - 'exec-shield' Remote Overflow Exploit-DBApache Tomcat mod_jk 1.2.20 - Remote Buffer Overflow (Metasploit)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.

Affected Products (2)

apache · tomcat_jk_web_server_connectorvulnerable

References (20)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795

http://secunia.com/advisories/24398

http://secunia.com/advisories/24558

http://secunia.com/advisories/27037

http://secunia.com/advisories/28711

http://securitytracker.com/id?1017719

http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html

Patch

http://tomcat.apache.org/security-jk.html

http://www.cisco.com/en/US/products/products_security_advisory09186a008093f040.shtml

KEV Catalog EPSS Scores Vendors All CVEs