CVE-2007-3948
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.103 Low
EPSS
Percentile
94.9%
connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service (failed assertion) via a large number of connection attempts.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lighttpd:lighttpd | lighttpd | le | 1.4.15 |
References
osvdb.org/38312
secunia.com/advisories/26130
secunia.com/advisories/26158
secunia.com/advisories/26505
secunia.com/advisories/31104
security.gentoo.org/glsa/glsa-200708-11.xml
trac.lighttpd.net/trac/changeset/1873
trac.lighttpd.net/trac/ticket/1216
www.debian.org/security/2008/dsa-1609
www.novell.com/linux/security/advisories/2007_15_sr.html
www.securityfocus.com/archive/1/474131/100/0/threaded
www.securityfocus.com/bid/24967
www.vupen.com/english/advisories/2007/2585
Social References
More
Related
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.103 Low
EPSS
Percentile
94.9%