Lucene search
FreeBSD4B673AE7-5F9A-11DC-84DD-000102CC8983HistorySep 09, 2007 - 12:00 a.m.
lighttpd -- FastCGI header overrun in mod_fastcgi
2007-09-0900:00:00
vuxml.freebsd.org
33
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.306 Low
EPSS
Percentile
96.9%
lighttpd maintainer reports:
Lighttpd is prone to a header overflow when using the mod_fastcgi
extension, this can lead to arbitrary code execution in the fastcgi
application. For a detailed description of the bug see the external
reference.
This bug was found by Mattias Bengtsson and Philip Olausson
Related
openvas
openvas
Fedora Update for lighttpd FEDORA-2007-2132
2009-02-27 00:00:00
FreeBSD Ports: lighttpd
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200709-16 (lighttpd)
2008-09-24 00:00:00
nessus
nessus
FreeBSD : lighttpd -- FastCGI header overrun in mod_fastcgi (4b673ae7-5f9a-11dc-84dd-000102cc8983)
2007-09-14 00:00:00
Fedora 7 : lighttpd-1.4.18-1.fc7 (2007-2132)
2007-11-06 00:00:00
openSUSE 10 Security Update : lighttpd (lighttpd-4532)
2007-10-17 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_LIGHTTPD3
2007-09-12 19:17:00
fedora
fedora
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-1.fc7
2007-09-12 16:43:05
cve
cve
CVE-2007-4727
2007-09-12 19:17:00
debiancve
debiancve
CVE-2007-4727
2007-09-12 19:17:00
checkpoint_advisories
checkpoint_advisories
Lighttpd mod_fastcgi Extension CGI Variable Overwriting (CVE-2007-4727)
2010-01-31 00:00:00
securityvulns
securityvulns
[Full-disclosure] rPSA-2007-0183-1 lighttpd
2007-09-14 00:00:00
lighttpd buffer overflow
2007-09-14 00:00:00
debian
debian
[SECURITY] [DSA 1362-2] New lighttpd packages fix buffer overflow
2007-10-07 15:17:55
prion
prion
Buffer overflow
2007-09-12 19:17:00
ubuntucve
ubuntucve
CVE-2007-4727
2007-09-12 00:00:00
gentoo
gentoo
Lighttpd: Buffer overflow
2007-09-27 00:00:00
PHP: Multiple vulnerabilities
2007-10-07 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.306 Low
EPSS
Percentile
96.9%
Related for 4B673AE7-5F9A-11DC-84DD-000102CC8983