Lucene search

PRIOn knowledge basePRION:CVE-2006-0814

HistoryMar 06, 2006 - 9:02 p.m.

Code injection

2006-03-0621:02:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.01 Low

EPSS

Percentile

83.5%

JSON

response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) “.” (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files.

CPENameOperatorVersion
lighttpdeq1.4.3
lighttpdeq1.2.3
lighttpdeq1.2.5
lighttpdeq1.3.6
lighttpdeq1.3.12
lighttpdeq1.3.15
lighttpdeq1.4.1
lighttpdeq1.2.2
lighttpdeq1.3.0
lighttpdeq1.0.3

Name	Operator	Version
lighttpd	eq	1.4.3
lighttpd	eq	1.2.3
lighttpd	eq	1.2.5
lighttpd	eq	1.3.6
lighttpd	eq	1.3.12
lighttpd	eq	1.3.15
lighttpd	eq	1.4.1
lighttpd	eq	1.2.2
lighttpd	eq	1.3.0
lighttpd	eq	1.0.3

Rows per page:

1-10 of 491

References

secunia.com/advisories/18886

secunia.com/secunia_research/2006-9/advisory/

securityreason.com/securityalert/523

securitytracker.com/id?1015703

trac.lighttpd.net/trac/changeset/1005

www.osvdb.org/23542

www.securityfocus.com/archive/1/426446/100/0/threaded

www.securityfocus.com/bid/16893

www.vupen.com/english/advisories/2006/0782

exchange.xforce.ibmcloud.com/vulnerabilities/24976

7.3 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.01 Low

EPSS

Percentile

83.5%

JSON

Related for PRION:CVE-2006-0814