Debian: Security Advisory (DSA-1303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200705-07 (lighttpd)

The remote host is missing updates announced in advisory GLSA 200705-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: lighttpd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

openSUSE 10 Security Update : lighttpd (lighttpd-3090)

Two remotely exploitable DoS vulnerabilities in lighttpd can be used to crash lighttpd or make it waste CPU time in an enless loop CVE-2007-1869, CVE-2007-1870. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Debian DSA-1303-1 : lighttpd - denial of service

Two problems were discovered with lighttpd, a fast webserver with minimal memory footprint, which could allow denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1869 Remote attackers could cause denial of service by disconnecting...

[SECURITY] [DSA 1303-1] New lighttpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1303-1 [email protected] http://www.debian.org/security/ Steve Kemp June 10, 2007 http://www.debian.org/security/faq -...

CVE-2007-1870

lighttpd is affected by CVE-2007-1870 (and CVE-2007-1869 in some advisories). The issue for CVE-2007-1870 is a NULL pointer dereference when serving files with an mtime of 0, leading to denial of service (crash). Open-source advisories and OpenVAS entries confirm the vulnerability in lighttpd ver...

CVE-2007-1870

lighttpd before 1.4.14 allows attackers to cause a denial of service crash via a request to a file whose mtime is 0, which results in a NULL pointer dereference...