CVE-2007-6514

NameCVE-2007-6514
DescriptionApache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing "\" (backslash), which is not handled by the intended AddType directive.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs529318

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
linux-2.6source(unstable)2.6.17-1low529318
linux-2.6.24source(unstable)(not affected)

Notes

- linux-2.6.24 <not-affected> (Fixed before initial upload, 2.6.17)
While labeled as an Apache flaw, fix required in smbfs

Search for package or bug name: Reporting problems