Lucene search
Redhat.comRH:CVE-2008-1270HistoryOct 04, 2019 - 9:56 p.m.
CVE-2008-1270
2019-10-0421:56:40
redhat.com
access.redhat.com
7
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.022
Percentile
89.7%
mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory.
Related
cve
cve
CVE-2008-1270
2008-03-10 21:44:00
openvas
openvas
Debian: Security Advisory (DSA-1521-1)
2008-03-19 00:00:00
Debian Security Advisory DSA 1521-1 (lighttpd)
2008-03-19 00:00:00
Gentoo Security Advisory GLSA 200804-08 (lighttpd)
2008-09-24 00:00:00
nvd
nvd
CVE-2008-1270
2008-03-10 21:44:00
debiancve
debiancve
CVE-2008-1270
2008-03-10 21:44:00
exploitdb
exploitdb
Lighttpd 1.4.x - mod_userdir Information Disclosure
2008-03-12 00:00:00
debian
debian
[SECURITY] [DSA 1521-1] New lighttpd packages fix arbitrary file disclosure
2008-03-16 15:45:09
cvelist
cvelist
CVE-2008-1270
2008-03-10 21:00:00
nessus
nessus
Debian DSA-1521-1 : lighttpd - file disclosure
2008-03-17 00:00:00
GLSA-200804-08 : lighttpd: Multiple vulnerabilities
2008-04-17 00:00:00
lighttpd < 1.4.19 Multiple Vulnerabilities
2018-02-06 00:00:00
ubuntucve
ubuntucve
CVE-2008-1270
2008-03-10 00:00:00
prion
prion
Directory traversal
2008-03-10 21:44:00
gentoo
gentoo
lighttpd: Multiple vulnerabilities
2008-04-10 00:00:00
osv
osv
lighttpd-1.4.59-2.1 on GA media
2024-06-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.022
Percentile
89.7%
Related for RH:CVE-2008-1270