CVE-2007-6258

Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Host header.

• CWE-119

• http://securityreason.com/securityalert/3661Broken Link
• http://www.ioactive.com/pdfs/mod_jk2.pdfThird Party Advisory
• http://www.ioactive.com/vulnerabilities/mod_jk2LegacyBufferOverflowAdvisory.pdfBroken Link
• http://www.kb.cert.org/vuls/id/771937Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/archive/1/487983/100/100/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/27752Patch, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/0572URL Repurposed
• https://www.exploit-db.com/exploits/5330Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5386Third Party Advisory, VDB Entry
• http://securityreason.com/securityalert/3661Broken Link
• http://www.ioactive.com/pdfs/mod_jk2.pdfThird Party Advisory
• http://www.ioactive.com/vulnerabilities/mod_jk2LegacyBufferOverflowAdvisory.pdfBroken Link
• http://www.kb.cert.org/vuls/id/771937Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/archive/1/487983/100/100/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/27752Patch, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/0572URL Repurposed
• https://www.exploit-db.com/exploits/5330Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5386Third Party Advisory, VDB Entry

Published

Feb 19, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6250Stack-based buffer overflow in AOL AOLMediaPlaybackControl (…
• CVE-2007-6252Multiple stack-based buffer overflows in the Learn2 Corporat…
• CVE-2007-6253Multiple buffer overflows in Adobe Form Designer 5.0 and For…
• CVE-2007-6254Stack-based buffer overflow in the SAP Business Objects Busi…
• CVE-2007-6255Buffer overflow in the Microsoft HeartbeatCtl ActiveX contro…
• CVE-2007-6256Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-6260The installation process for Oracle 10g and llg uses account…
• CVE-2007-6261Integer overflow in the load_threadstack function in the Mac…
• CVE-2007-6262A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6…
• CVE-2007-6263The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd)…
• CVE-2007-6265Unspecified vulnerability in avast! 4 Home and Professional …
• CVE-2007-6266Multiple SQL injection vulnerabilities in bcoos 1.0.10 and e…