DSA-1609-1 lighttpd - multiple DOS issues

Bulletin has no description...

Fedora 9 : lighttpd-1.4.19-4.fc9 (2008-4119)

This update fixes a bug where a user could kill another user's SSL connection by killing his own, because the SSL error queue wasn't cleared properly. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

[SECURITY] Fedora 9 Update: lighttpd-1.4.19-4.fc9

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

openSUSE 10 Security Update : lighttpd (lighttpd-5216)

An error in one SSL connection could lead to termination of all SSL connections CVE-2008-1531 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-5216. The text description of this plugin...

Fedora 7 : lighttpd-1.4.19-4.fc7 (2008-3343)

This update fixes a bug where a user could kill another user's SSL connection by killing his own, because the SSL error queue wasn't cleared properly. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

Fedora 8 : lighttpd-1.4.19-4.fc8 (2008-3376)

This update fixes a bug where a user could kill another user's SSL connection by killing his own, because the SSL error queue wasn't cleared properly. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

[SECURITY] Fedora 7 Update: lighttpd-1.4.19-4.fc7

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

Debian Security Advisory DSA 1540-1 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1540-1. OpenVAS Vulnerability Test $Id: deb15401.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1540-1 lighttpd Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1540-2 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1540-2. OpenVAS Vulnerability Test $Id: deb15402.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1540-2 lighttpd Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1540-2 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1540-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian: Security Advisory (DSA-1540-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200804-08 : lighttpd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-08 lighttpd: Multiple vulnerabilities Julien Cayzax discovered that an insecure default setting exists in moduserdir in lighttpd. When userdir.path is not set the default value used is $HOME. It should be noted that the...

Lighttpd SSL错误拒绝服务漏洞

BUGTRAQ ID: 28489 CVECAN ID: CVE-2008-1531 Lighttpd是一款轻型的开放源码Web Server软件包。 lighttpd没有正确地清除OpenSSL错误队列，如果远程攻击者可以触发SSL错误的话，如在下载结束前断开连接，lighttpd就可能断开所有活动的SSL连接。 LightTPD 1.4.19 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1540-2）以及相应补丁: DSA-1540-2：New lighttpd packages fix denial of service...

FreeBSD : lighttpd -- OpenSSL Error Queue Denial of Service Vulnerability (1ac77649-0908-11dd-974d-000fea2763ce)

Secunia reports : A vulnerability has been reported in lighttpd, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to lighttpd not properly clearing the OpenSSL error queue. This can be exploited to close concurrent SSL connections of...

[SECURITY] [DSA 1540-2] New lighttpd packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1540-2 [email protected] http://www.debian.org/security/ Steve Kemp April 15, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Debian DSA-1540-1 : lighttpd - denial of service

It was discovered that lighttpd, a fast webserver with minimal memory footprint, didn't correctly handle SSL errors. This could allow a remote attacker to disconnect all active SSL connections. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

lighttpd: Multiple vulnerabilities

Background lighttpd is a lightweight high-performance web server. Description Julien Cayzax discovered that an insecure default setting exists in moduserdir in lighttpd. When userdir.path is not set the default value used is $HOME. It should be noted that the "nobody" user's $HOME is "/"...

[SECURITY] [DSA 1540-1] New lighttpd packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1540-1 [email protected] http://www.debian.org/security/ Steve Kemp April 07, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

DSA-1540-1 lighttpd

Bulletin has no description...

openSUSE 10 Security Update : lighttpd (lighttpd-5107)

Remote attackers were able to crash lighttpd by opening a large number of connections CVE-2008-0983. - A bug in modcgi allowed remote attackers to read cgi source files CVE-2008-1111. - A bug in moduserdir allowed remote attackers to read arbitrary files CVE-2008-1270. %NASLMINLEVEL 70300 C...