CVE-2020-5519

The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...

CVE-2020-5519: Improper Input Validation

The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...

LiteSpeed OpenLiteSpeed Buffer Overflow Vulnerability

LiteSpeed OpenLiteSpeed is an open source lightweight HTTP server . A buffer overflow vulnerability exists in versions prior to LiteSpeed OpenLiteSpeed 1.5.0 RC6, which can be exploited by a local attacker to cause a denial of service by creating a symbolic link...

LiteSpeed OpenLiteSpeed Denial of Service Vulnerability

LiteSpeed OpenLiteSpeed is an open source lightweight HTTP server . A denial of service vulnerability exists in LiteSpeed OpenLiteSpeed versions prior to 1.5.0 RC6, which stems from the program's failure to properly handle requests for sequences of bytes, and can be exploited to cause a denial of...

CVE-2018-19791

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demonstrated by an HTTP Range header value beginning with the "bytes=0-,0-" substri...

CVE-2018-19791

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demonstrated by an HTTP Range header value beginning with the "bytes=0-,0-" substri...

Design/Logic Flaw

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demonstrated by an HTTP Range header value beginning with the "bytes=0-,0-" substri...

Buffer overflow

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service buffer overflow or possibly have unspecified other impact by creating a symlink through which the openlitespeed program can be invoked with a long command name involving ../ characters, which is...

CVE-2018-19792

The vulnerability CVE-2018-19792 affects LiteSpeed OpenLiteSpeed before 1.5.0 RC6. A buffer overflow in the server path resolution (LshttpdMain::getServerRootFromExecutablePath) can be triggered by creating a symlink with a long command name (involving ../../) and allows a local attacker to cause...

CVE-2018-19791

LiteSpeed OpenLiteSpeed before 1.5.0 RC6 is affected. The server mishandles requests for byte sequences, allowing an attacker to amplify response size by repeatedly requesting the entire response body with an HTTP Range value starting with bytes=0-,0-. This can cause a Denial of Service (availabi...

CVE-2018-19791

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demonstrated by an HTTP Range header value beginning with the "bytes=0-,0-" substri...

CVE-2018-19792

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service buffer overflow or possibly have unspecified other impact by creating a symlink through which the openlitespeed program can be invoked with a long command name involving ../ characters, which is...

CVE-2018-19791: Improper Input Validation

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demonstrated by an HTTP Range header value beginning with the "bytes=0-,0-" substri...

CVE-2018-19792: Improper Restriction of Operations within the Bounds of a Memory Buffer

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service buffer overflow or possibly have unspecified other impact by creating a symlink through which the openlitespeed program can be invoked with a long command name involving ../ characters, which is...

Open Litespeed Memory Misreference Vulnerability

Open Litespeed is a high-performance , lightweight , open source HTTP server of the United States LiteSpeed Inc. Open Litespeed suffers from a memory misreference vulnerability that allows remote attackers to exploit the vulnerability by submitting a special file and tricking the application into...

OpenLiteSpeed Buffer Overflow Denial of Service Vulnerability

OpenLiteSpeed is a high performance, lightweight, open source HTTP server. OpenLiteSpeed suffers from a heap buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request to crash the application or execute arbitrary code...

OpenLitespeed 1.3.9 - Use After Free (DoS)

Exploit for linux platform in category dos / poc / Openlitespeed 1.3.9 Use After Free denial of service exploit. This exploit triggers a denial of service condition within the Openlitespeed web server. This is achieved by sending a tampered request contain a large number 91 of 'a: a' header rows...

OpenLitespeed 1.3.9 - Use-After-Free (Denial of Service)

/ Openlitespeed 1.3.9 Use After Free denial of service exploit. This exploit triggers a denial of service condition within the Openlitespeed web server. This is achieved by sending a tampered request contain a large number 91 of 'a: a' header rows. By looping this request, a memmove call within t...

OpenLitespeed 1.3.9 - Use-After-Free (Denial of Service)

OpenLitespeed 1.3.9 - Use-After-Free Denial of Service / Openlitespeed 1.3.9 Use After Free denial of service exploit. This exploit triggers a denial of service condition within the Openlitespeed web server. This is achieved by sending a tampered request contain a large number 91 of 'a: a' header...