CVE-2007-1862: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days.

The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.

Affected products

• Apache HTTP Server: version 2.2.4 only

Published 2007-06-04. Last modified 2026-06-16.