Oracle Solaris Third-Party Patch Update : lighttpd (cve_2014_2469_denial_of)

The remote Solaris system is missing necessary patches to address security updates : - lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into...

CVE-2014-2469

Affected software: Oracle Solaris 11.1 with lighttpd. Vulnerable component: lighttpd service (unspecified vulnerability) leading to denial of service via unknown vectors. Documented impact: denial of service; CVSS v2 base score 5.0 (MEDIUM) per NVD. Root cause details are not provided in the sour...

lighttpd拒绝服务漏洞

Bugtraq ID:66599 CVE ID:CVE-2014-2469 lighttpd是一款HTTP服务程序。 lighttpd存在一个未明错误，允许远程攻击者利用漏洞提交恶意请求使服务程序崩溃。 0 lighttpd 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： https://blogs.oracle.com/sunsecurity/entry/cve20142469denialof...