CVE-2007-6514 describes an information disclosure vulnerability in Apache HTTP Server when deployed on Linux with a document root mounted from a Windows share via smbfs. Attackers can bypass intended AddType directives by appending a backslash to requests, leading to the exposure of unprocessed content like PHP source code. This vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and potential for partial confidentiality impact, but no integrity or availability impact. While no active exploitation is noted and community discussion is minimal, a public exploit for a similar Windows-based scenario exists on ExploitDB.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.2.6CPE matchmatch criteria | cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.