CVE:CVE-2007-3304
CNNVD:CNNVD-200706-316
Apache HTTP Server是一款流行的Web服务器。
Apache HTTP Server Worker进程实现上存在多个漏洞，本地攻击者可能利用这些漏洞导致服务不可用。
在发送信号之前Apache HTTP Server没有验证进程为Apache子进程。能够在Apache HTTP Server上运行脚本的本地攻击者可以控制记分板并终止任意进程，导致拒绝服务。
如果Apache httpd安装了Prefork MPM模块的话，本地攻击者就可以修改worker_score和process_score数组使其引用任意进程ID，主进程向其发送了SIGUSR1信号的话就会导致拒绝服务。
solution:Upgrade apache http_server to a higher version than 1.3.39,2.0.61,2.2.6,and avoid the version [1.3.0,1.3.39),[2.0.0,2.0.61),[2.2.0,2.2.6); Upgrade fedoraproject fedora to a higher version than 7,and avoid the version 7; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_server to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,and avoid the version 5.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,6.10,7.04,and avoid the version 6.06,6.10,7.04