DEBIAN-CVE-2007-1869

lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service cpu and resource consumption by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption...

Design/Logic Flaw

lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service cpu and resource consumption by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption...

CVE-2007-1869

lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service cpu and resource consumption by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption...

CVE-2007-1870

lighttpd before 1.4.14 allows attackers to cause a denial of service crash via a request to a file whose mtime is 0, which results in a NULL pointer dereference...

CVE-2007-1869

lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service cpu and resource consumption by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption...

CVE-2007-1870

lighttpd before 1.4.14 allows attackers to cause a denial of service crash via a request to a file whose mtime is 0, which results in a NULL pointer dereference...

CVE-2007-1870

lighttpd is affected by CVE-2007-1870 (and CVE-2007-1869 in some advisories). The issue for CVE-2007-1870 is a NULL pointer dereference when serving files with an mtime of 0, leading to denial of service (crash). Open-source advisories and OpenVAS entries confirm the vulnerability in lighttpd ver...

CVE-2007-1869

CVE-2007-1869 affects lighttpd 1.4.12 and 1.4.13, where a remote attacker can cause denial of service by disconnecting while the server parses CRLF sequences, triggering an infinite loop and excessive file descriptor/resource consumption. The impact is a network-exposed DoS with CPU and memory/re...

CVE-2007-1869

lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service cpu and resource consumption by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption...

CVE-2007-1870: Undefined Security Weakness

lighttpd before 1.4.14 allows attackers to cause a denial of service crash via a request to a file whose mtime is 0, which results in a NULL pointer dereference...

CVE-2007-1869: Undefined Security Weakness

lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service cpu and resource consumption by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption...

Lighttpd < 1.4.14 Multiple DoS

Binary data 3969.prm...

Lighttpd 1.4.15 - Multiple Code Execution Denial of Service Information Disclosure Vulnerabilities

Lighttpd 1.4.15 - Multiple Code Execution Denial of Service Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/24967/info Lighttpd is prone to multiple remote denial-of-service vulnerabilities, a code-execution vulnerability, and an information-disclosure...

Lighttpd 1.4.15 - Multiple Code Execution / Denial of Service / Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/24967/info Lighttpd is prone to multiple remote denial-of-service vulnerabilities, a code-execution vulnerability, and an information-disclosure vulnerability. An attacker can exploit these issues to execute arbitrary code, access sensitive information, o...

XSS in lighttpd

hey guys .. check out this new xss i just found ;P Vulnerable : lighttpd web : http://www.lighttpd.net XSS : http://127.0.0.1/path/search?q=223E3Cscript3Ealert2827bl4ck27293C2Fscript3E Discovered By BLacK ZeRo [email protected] Best regards ,,...

lighttpd -- DOS when access files with mtime 0

Lighttpd SA: Lighttpd caches the rendered string for mtime. The cache key has as a default value 0. At that point the pointer to the string are still NULL. If a file with an mtime of 0 is requested it tries to access the pointer and crashes. The bug requires that a malicious user can either uploa...

lighttpd -- Remote DOS in CRLF parsing

Lighttpd SA: If the connection aborts during parsing "\r\n\r\n" the server might get into a infinite loop and use 100% of the CPU time. lighttpd still responses to other requests. This can be repeated until either the server limit for concurrent connections or file descriptors is reached. The bug...

lighttpd on Windows < 1.4.10a Crafted Filename Request Script Source Disclosure

According to its banner, the version of lighttpd running on the remote Windows host is prior to 1.4.10a. It is, therefore, affected by an information disclosure vulnerability due to a failure to properly validate filename extensions in URLs. A remote attacker can exploit this issue, via specially...

CVE-2006-0814

response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing 1 "." dot and 2 space characters, which are ignored by Windows, as demonstrated by PHP files...

Code injection

response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing 1 "." dot and 2 space characters, which are ignored by Windows, as demonstrated by PHP files...