CVE-2007-6258: Apache Mod Jk

High severity, CVSS 7.5. EPSS: 41.5% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Host header.

Affected products

• Apache Mod Jk: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3_dev only
• F5 BIG-IP: version 9.2.3.30 only

Published 2008-02-19. Last modified 2026-06-16.