1515 matches found
[SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1987-1 [email protected] http://www.debian.org/security/ Nico Golde February 2nd, 2010 http://www.debian.org/security/faq -...
lighttpd 1.4/1.5 - Slow Request Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/38036/info The 'lighttpd' webserver is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to hang, denying service to legitimate users. slowtest.sh for j=0;j/dev/null 2/dev/null & done& sleep 3 don...
Lighttpd mod_fastcgi Extension CGI Variable Overwriting (CVE-2007-4727)
Lighttpd is an open source HTTP server project. Lighttpd focus on smaller memory footprint and higher runtime efficiency. The server supports an advanced feature set, including FastCGI. A variable overwriting vulnerability exists in Lighttpd FastCGI extension. A remote unauthenticated attacker ca...
Lighttpd < 1.4.20 Multiple Vulnerabilities
Lighttpd is prone to multiple security vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
lighttpd 1.4.15 多个远程拒绝服务和信息泄露漏洞
No description provided by source...
lighttpd 1.4.19 重复头部请求导致拒绝服务漏洞
No description provided by source...
Lighttpd URI Rewrite-Redirect信息泄漏漏洞
No description provided by source...
lighttpd 1.4.10 远程脚本代码泄漏漏洞
No description provided by source...
Lighttpd多个远程拒绝服务漏洞
No description provided by source...
lighttpd 1.4.23 Trailing Slash信息泄漏漏洞
No description provided by source...
lighttpd 1.3.7 远程CGI脚本代码泄漏漏洞
No description provided by source...
lighttpd 1.4.19 mod_userdir区分大小写比较导致代码泄露漏洞
No description provided by source...
lighttpd 1.4.1 Mod_FastCGI请求头部远程溢出漏洞
No description provided by source...
lighttpd 1.4.19 ssl错误导致拒绝服务
No description provided by source...
openSUSE Security Update : lighttpd (lighttpd-1586)
This update fixes a regression caused by the last security update for CVE-2008-4360. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-1586. The text description of this plugin is C SUS...
openSUSE Security Update : lighttpd (lighttpd-1586)
This update fixes a regression caused by the last security update for CVE-2008-4360. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-1586. The text description of this plugin is C SUS...
openSUSE Security Update : lighttpd (lighttpd-309)
Various issues have been fixed in lighttpd. CVE-2008-4298, CVE-2008-4359 and CVE-2008-4360 have been assigned to thess issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-309. The...
lighttpd PHP File Trailing Slash Request Source Disclosure
The version of lighttpd running on the remote host discloses the source code of files such as PHP scripts when a '/' is appended to a URL corresponding to a symbolic link. This vulnerability occurs only on certain operating systems FreeBSD, Mac OS X, and Solaris prior to version 10 are known to b...
Lighttpd <= 1.4.23 'Trailing Slash' Information Disclosure Vulnerability
Lighttpd is prone to an information disclosure vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
Lighttpd 1.4.23 Source Code Disclosure Vulnerability (FreeBSD/OSX bug)
No description provided by source. Severe vulnerability in FreeBSD/OSX with Lighttpd 1.4.23 latest version Most httpd daemons are probably vulnerable to this with FreeBSD/OSX as the OS. http://redmine.lighttpd.net/issues/1989 Description If you put a trailing slash / after the .php and that file ...