CVE-2008-1531

The connectionstatemachine function connections.c in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service active SSL connection loss by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL...

Fedora Update for lighttpd FEDORA-2008-3376

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for lighttpd FEDORA-2008-3343

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD Ports: lighttpd

The remote host is missing an update to the system as announced in the referenced advisory. VID 1ac77649-0908-11dd-974d-000fea2763ce OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: lighttpd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] [DSA 1540-3] New lighttpd packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1540-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 23, 2008 http://www.debian.org/security/faq -...

openSUSE 10 Security Update : lighttpd (lighttpd-5216)

An error in one SSL connection could lead to termination of all SSL connections CVE-2008-1531 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-5216. The text description of this plugin...

[SECURITY] [DSA 1540-2] New lighttpd packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1540-2 [email protected] http://www.debian.org/security/ Steve Kemp April 15, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 1540-1] New lighttpd packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1540-1 [email protected] http://www.debian.org/security/ Steve Kemp April 07, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

rPSA-2008-0132-1 lighttpd

rPath Security Advisory: 2008-0132-1 Published: 2008-03-31 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Remote Deterministic Denial of Service Updated Versions: lighttpd=conary.rpath.com@rpl:1/1.4.18-0.5-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-24...

CVE-2008-1531

The connectionstatemachine function connections.c in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service active SSL connection loss by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL...

CVE-2008-1531

The connectionstatemachine function connections.c in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service active SSL connection loss by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL...

CVE-2008-1531

CVE-2008-1531 concerns lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0. The vulnerability exists in the connection_state_machine() (connections.c): triggering an SSL error (e.g., disconnecting before a download finishes) can cause all active SSL connections to be lost, yielding a denial of se...