Lucene search
FreeBSDC6521B04-314B-11E1-9CF4-5404A67EEF98HistoryNov 29, 2011 - 12:00 a.m.
lighttpd -- remote DoS in HTTP authentication
2011-11-2900:00:00
vuxml.freebsd.org
40
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.026 Low
EPSS
Percentile
90.1%
US-CERT/NIST reports:
Integer signedness error in the base64_decode function in the
HTTP authentication functionality (http_auth.c) in lighttpd 1.4
before 1.4.30 and 1.5 before SVN revision 2806 allows remote
attackers to cause a denial of service (segmentation fault)
via crafted base64 input that triggers an out-of-bounds read
with a negative index.
Related
openvas
openvas
FreeBSD Ports: lighttpd
2012-02-13 00:00:00
Amazon Linux: Security Advisory (ALAS-2012-107)
2015-09-08 00:00:00
FreeBSD Ports: lighttpd
2012-02-13 00:00:00
seebug
seebug
Lighttpd Proof of Concept code for CVE-2011-4362
2012-01-02 00:00:00
Lighttpd 1.4.30 / 1.5 Denial Of Service
2011-12-27 00:00:00
lighttpd Denial of Service Vulnerability PoC
2014-07-01 00:00:00
exploitpack
exploitpack
lighttpd - Denial of Service (PoC)
2011-12-31 00:00:00
ubuntucve
ubuntucve
CVE-2011-4362
2011-12-24 00:00:00
debiancve
debiancve
CVE-2011-4362
2011-12-24 19:55:00
fedora
fedora
[SECURITY] Fedora 17 Update: lighttpd-1.4.31-1.fc17
2012-06-26 00:44:26
[SECURITY] Fedora 16 Update: lighttpd-1.4.31-1.fc16
2012-06-26 00:31:28
nessus
nessus
Amazon Linux AMI : lighttpd (ALAS-2012-107)
2013-09-04 00:00:00
Fedora 17 : lighttpd-1.4.31-1.fc17 (2012-9040)
2012-06-26 00:00:00
lighttpd < 1.4.30 base64_decode Function Out-of-Bounds Read Error DoS
2011-12-28 00:00:00
securityvulns
securityvulns
Lighttpd Proof of Concept code for CVE-2011-4362
2012-01-02 00:00:00
lighthttpd security vulnerabilities
2012-01-02 00:00:00
[SECURITY] [DSA 2368-1] lighttpd security update
2011-12-26 00:00:00
cve
cve
CVE-2011-4362
2011-12-24 19:55:00
amazon
amazon
Medium: lighttpd
2012-07-09 14:20:00
prion
prion
Integer overflow
2011-12-24 19:55:00
exploitdb
exploitdb
lighttpd - Denial of Service (PoC)
2011-12-31 00:00:00
debian
debian
[SECURITY] [DSA 2368-1] lighttpd security update
2011-12-21 00:24:51
[SECURITY] [DSA 2381-] lighttpd security update
2011-12-21 00:02:46
osv
osv
lighttpd - several
2011-12-20 00:00:00
gentoo
gentoo
lighttpd: Multiple vulnerabilities
2014-06-13 00:00:00
ibm
ibm
jvn
jvn
JVN#37417423: Multiple vulnerabilities in SolarView Compact
2021-02-19 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.026 Low
EPSS
Percentile
90.1%
Related for C6521B04-314B-11E1-9CF4-5404A67EEF98