Arbitrary code execution in Apache Tomcat JK ISAPI Connector - CVE-2007-0774

Vulnerability identifier: #VU799

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2007-0774

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote unauthenticated user to cause arbitrary code execution or DoS conditions on the target system.
The weakness is due to stack overflow that may occur because of unsafe memory copy in the URI handler for the native JK connector and allows attackers to execute arbitrary code or trigger the web server crash.
Successful exploitation of the vulnerablity may result in erbitrary code execution or

Apache Tomcat JK ISAPI Connector
Gentoo Linux

Update to version 1.2.21.

• Exploit #416 - Apache Tomcat mod_jk 1.2.20 - Buffer Overflow (Metasploit) (March 18, 2020)
• Exploit #417 - Apache Tomcat Connector mod_jk - 'exec-shield' Remote Exploit (March 18, 2020)
• Exploit #1620 - Apache mod_jk 1.2.20 Buffer Overflow (March 18, 2020)

• http://tomcat.apache.org/security-jk.html#Fixed_in_Apache_Tomcat_JK_Connector_1.2.21

• Gentoo update for Apache JK Tomcat Connector