CVE:CVE-2007-6258
CNNVD:CNNVD-200802-324
legacy mod_jk2的 Apache 模块存在多个基于堆缓冲区错误漏洞。远程攻击者可以通过一个长的(1) 主机头(Host header)或者 (2) 主机名中包含的主机头部来执行任意代码。
solution:Upgrade apache mod_jk to a higher version than 2.0,2.0.1,2.0.2,2.0.3_dev,and avoid the version 2.0,2.0.1,2.0.2,2.0.3_dev; Upgrade f5 big-ip to a higher version than 9.2.3.30,and avoid the version 9.2.3.30