1428 matches found
CVE-2010-0295
lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...
CVE-2010-0295
lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...
CVE-2010-0295
CVE-2010-0295 affects lighttpd 1.4.26 and 1.5.x, where a buffer is allocated per read operation for a request, enabling a remote attacker to cause memory consumption/DoS by sending a request in small pieces slowly. Connected sources (IBM IMM bulletin, Nessus/SEC advisories) confirm this vulnerabi...
CVE-2010-0295
lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...
CVE-2010-0295
lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into small pieces that are sent at a slow rate...
[SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA-1987-1 [email protected] http://www.debian.org/security/ Nico Golde February 2nd, 2010 http://www.debian.org/security/faq -...
lighttpd DoS
Memory exhaustion on HTTP request reading...
Llighttpd < 1.4.26 'Slow Request Handling' Remote DoS Vulnerability
Lighttpd is prone to a denial of service DoS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
DSA-1987-1 lighttpd - denial of service
Bulletin has no description...
lighttpd -- denial of service vulnerability
Lighttpd security advisory reports: If you send the request data very slow e.g. sleep 0.01 after each byte, lighttpd will easily use all available memory and die especially for parallel requests, allowing a DoS within minutes...
lighttpd 1.41.5 - Slow Request Handling Remote Denial of Service
lighttpd 1.41.5 - Slow Request Handling Remote Denial of Service source: https://www.securityfocus.com/bid/38036/info The 'lighttpd' webserver is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to hang, denying service to legitimate...
[SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1987-1 [email protected] http://www.debian.org/security/ Nico Golde February 2nd, 2010 http://www.debian.org/security/faq -...
lighttpd 1.4/1.5 - Slow Request Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/38036/info The 'lighttpd' webserver is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to hang, denying service to legitimate users. slowtest.sh for j=0;j/dev/null 2/dev/null & done& sleep 3 don...
Lighttpd mod_fastcgi Extension CGI Variable Overwriting (CVE-2007-4727)
Lighttpd is an open source HTTP server project. Lighttpd focus on smaller memory footprint and higher runtime efficiency. The server supports an advanced feature set, including FastCGI. A variable overwriting vulnerability exists in Lighttpd FastCGI extension. A remote unauthenticated attacker ca...
Lighttpd < 1.4.20 Multiple Vulnerabilities
Lighttpd is prone to multiple security vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
lighttpd 1.4.19 重复头部请求导致拒绝服务漏洞
No description provided by source...
lighttpd 1.4.15 多个远程拒绝服务和信息泄露漏洞
No description provided by source...
lighttpd 1.3.7 远程CGI脚本代码泄漏漏洞
No description provided by source...