Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2007-3947HistoryJul 24, 2007 - 12:30 a.m.
CVE-2007-3947
2007-07-2400:30:00
Debian Security Bug Tracker
security-tracker.debian.org
6
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
0.105 Low
EPSS
Percentile
94.9%
request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate headers, as demonstrated by a request containing two Location header lines, which results in a segmentation fault.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | lighttpd | < 1.4.16-1 | lighttpd_1.4.16-1_all.deb |
| Debian | 11 | all | lighttpd | < 1.4.16-1 | lighttpd_1.4.16-1_all.deb |
| Debian | 10 | all | lighttpd | < 1.4.16-1 | lighttpd_1.4.16-1_all.deb |
| Debian | 999 | all | lighttpd | < 1.4.16-1 | lighttpd_1.4.16-1_all.deb |
| Debian | 13 | all | lighttpd | < 1.4.16-1 | lighttpd_1.4.16-1_all.deb |
Related
cve
cve
CVE-2007-3947
2007-07-24 00:30:00
CVE-2007-2841
2019-11-06 04:15:00
ubuntucve
ubuntucve
CVE-2007-3947
2007-07-24 00:00:00
prion
prion
Cross site request forgery (csrf)
2007-07-24 00:30:00
Design/Logic Flaw
2019-11-06 04:15:00
openvas
openvas
FreeBSD Ports: lighttpd
2008-09-04 00:00:00
Debian Security Advisory DSA 1362-1 (lighttpd)
2008-01-17 00:00:00
FreeBSD Ports: lighttpd
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1362-1] New lighttpd packages fix several vulnerabilities
2007-08-29 21:21:11
freebsd
freebsd
lighttpd -- multiple vulnerabilities
2007-07-20 00:00:00
nessus
nessus
FreeBSD : lighttpd -- multiple vulnerabilities (fc9c217e-3791-11dc-bb1a-000fea449b8a)
2007-07-27 00:00:00
openSUSE 10 Security Update : lighttpd (lighttpd-3985)
2007-10-17 00:00:00
lighttpd < 1.4.16 Multiple Vulnerabilities
2018-02-06 00:00:00
osv
osv
lighttpd - several vulnerabilities
2007-08-29 00:00:00
gentoo
gentoo
Lighttpd: Multiple vulnerabilities
2007-08-16 00:00:00
securityvulns
securityvulns
Lighttpd multiple security vulnerabilities
2007-08-17 00:00:00
[ GLSA 200708-11 ] Lighttpd: Multiple vulnerabilities
2007-08-17 00:00:00
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
0.105 Low
EPSS
Percentile
94.9%
Related for DEBIANCVE:CVE-2007-3947