参照: Official suse advisory, NVD, CVE.org · CVE 詳細
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2007-0774 severity moderate: SUSE including 4 source package names (apache2-mod_jk-1.2.26-1.30.110, apache2-mod_jk-1.2.40-0.2.1, apache2-mod_jk-1.2.40-1.6, apache2-mod_jk-1.2.48-2.9), 5 product×package rows across 5 product lines (SUSE Linux Enterprise Server 11 SP2, SUSE Linux Enterprise Server 11 SP3, … (5 product lines)): Fixed 5.
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.