suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local…

Description

suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities to create arbitrary UID/GID owned files if /proc is mounted. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root." In addition, because this is dependent on other vulnerabilities, perhaps this is resultant and should not be included in CVE.

Scores

EPSS (exploitation in 30 days)

0.70% · top 47% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.4.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (4)

• 20070411 Apache HTTPD suEXEC Multiple Vulnerabilities (opens in a new tab)third-party-advisoryx_refsource_IDEFENSEx_transferred
• [apache-http-dev] 20070328 Re: [Fwd: iDefense Final Notice [IDEF1445]] (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• 1017904 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• [apache-http-dev] 20070328 [Fwd: iDefense Final Notice [IDEF1445]] (opens in a new tab)mailing-listx_refsource_MLISTx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2007-1743](https://trackcve.app/badge/CVE-2007-1743.svg)](https://trackcve.app/cve/CVE-2007-1743)

Record last updated 7 Aug 2024, 13:06 UTC.