CVE-2007-6420

Name: CVE-2007-6420
Creator: NVD / NIST
Published: 2008-01-12T00:46:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 9.11%

Last modified Jun 16, 2026

CVE-2007-6420 is a vulnerability of currently unknown severity. Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.. EPSS estimates a 9.11% chance of exploitation in the next 30 days.

Description

Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.

Metrics

EPSS Probability

9.11%

94.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-352

Affected Software

Vendor	Product	Versions
Apache	Http Server	2.2.0
Apache	Http Server	2.2.2
Apache	Http Server	2.2.3
Apache	Http Server	2.2.4
Apache	Http Server	2.2.5
Apache	Http Server	2.2.6
Apache	Http Server	2.2.8
Canonical	Ubuntu Linux	6.06
Canonical	Ubuntu Linux	7.10
Canonical	Ubuntu Linux	8.04

References

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.htmlBroken Link
http://marc.info/?l=bugtraq&m=123376588623823&w=2Third Party Advisory
http://secunia.com/advisories/31026Not Applicable
http://secunia.com/advisories/32222Not Applicable
http://secunia.com/advisories/33797Not Applicable
http://secunia.com/advisories/34219Not Applicable
http://security.gentoo.org/glsa/glsa-200807-06.xmlThird Party Advisory
http://securityreason.com/securityalert/3523Third Party Advisory
http://support.apple.com/kb/HT3216Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0966.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/486169/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/494858/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/27236Patch, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/31681Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-731-1Third Party Advisory
http://www.vupen.com/english/advisories/2008/2780Permissions Required
http://www.vupen.com/english/advisories/2009/0320Permissions Required
https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3EVendor Advisory
https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8371Broken Link
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.htmlBroken Link
http://marc.info/?l=bugtraq&m=123376588623823&w=2Third Party Advisory
http://secunia.com/advisories/31026Not Applicable
http://secunia.com/advisories/32222Not Applicable
http://secunia.com/advisories/33797Not Applicable
http://secunia.com/advisories/34219Not Applicable
http://security.gentoo.org/glsa/glsa-200807-06.xmlThird Party Advisory
http://securityreason.com/securityalert/3523Third Party Advisory
http://support.apple.com/kb/HT3216Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0966.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/486169/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/494858/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/27236Patch, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/31681Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-731-1Third Party Advisory
http://www.vupen.com/english/advisories/2008/2780Permissions Required
http://www.vupen.com/english/advisories/2009/0320Permissions Required
https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3EVendor Advisory
https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3EPatch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8371Broken Link

Timeline

Published: Jan 12, 2008
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-6420?

Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.

How severe is CVE-2007-6420?

Severity scoring for CVE-2007-6420 is pending analysis. The EPSS model estimates a 9.11% probability of exploitation in the next 30 days.

How do I fix CVE-2007-6420?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-6420?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST