openSUSE Security Update : lighttpd (lighttpd-1914)

This update fixes a denial of service vulnerability in lighttpd that can be triggers using slow requests. CVE-2010-0295 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-1914. The text...

openSUSE Security Update : lighttpd (lighttpd-1914)

This update fixes a denial of service vulnerability in lighttpd that can be triggers using slow requests. CVE-2010-0295 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-1914. The text...

openSUSE Security Update : lighttpd (lighttpd-1914)

This update fixes a denial of service vulnerability in lighttpd that can be triggers using slow requests. CVE-2010-0295 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-1914. The text...

Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers

Advisory ID Internal CORE-2010-0121 1. Advisory Information Advisory Id: CORE-2010-0121 Advisory URL:https://www.coresecurity.com/core-labs/advisories/filename-pseudonyms-vulnerabilities Date published: 2010-02-05 Date of last update: 2010-02-05 Vendors contacted: Cherokee team, Nginx team,...

lighttpd畸形HTTP请求远程拒绝服务漏洞

BUGTRAQ ID: 38036 CVE ID: CVE-2010-0295 Lighttpd是一款轻型的开放源码Web Server软件包。 Lighttpd服务器每次接收到网络报文都会分配4K或16K的堆内存，如果远程攻击者缓慢的发送HTTP请求（如每秒钟发送1字节），就会耗尽所有可用内存导致服务器终止。 LightTPD LightTPD 1.5 LightTPD LightTPD 1.4.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1987-1）以及相应补丁: DSA-1987-1：lighttpd -- denial of...

Design/Logic Flaw

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...

DEBIAN-CVE-2010-0295

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...

CVE-2010-0295

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...

CVE-2010-0295

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...

CVE-2010-0295

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...

CVE-2010-0295

CVE-2010-0295 affects lighttpd 1.4.26 and 1.5.x, where a buffer is allocated per read operation for a request, enabling a remote attacker to cause memory consumption/DoS by sending a request in small pieces slowly. Connected sources (IBM IMM bulletin, Nessus/SEC advisories) confirm this vulnerabi...

CVE-2010-0295

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...

CVE-2010-0295

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...

CVE-2010-0295: Undefined Security Weakness

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...

[SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1987-1 [email protected] http://www.debian.org/security/ Nico Golde February 2nd, 2010 http://www.debian.org/security/faq -...

lighttpd DoS

Memory exhaustion on HTTP request reading...

Llighttpd < 1.4.26 'Slow Request Handling' Remote DoS Vulnerability

Lighttpd is prone to a denial of service DoS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

lighttpd -- denial of service vulnerability

Lighttpd security advisory reports: If you send the request data very slow e.g. sleep 0.01 after each byte, lighttpd will easily use all available memory and die especially for parallel requests, allowing a DoS within minutes...

DSA-1987-1 lighttpd - denial of service

Bulletin has no description...

lighttpd 1.41.5 - Slow Request Handling Remote Denial of Service

lighttpd 1.41.5 - Slow Request Handling Remote Denial of Service source: https://www.securityfocus.com/bid/38036/info The 'lighttpd' webserver is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to hang, denying service to legitimate...