CVE-2019-11072

lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burlnormalize2Ftoslashfix in burl.c. NOTE:...

CVE-2019-11072

lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burlnormalize2Ftoslashfix in burl.c. NOTE:...

PT-2019-5414 · Lighttpd +1 · Lighttpd +1

Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.54 Description: The issue is related to a signed integer overflow in lighttpd, which could allow remote attackers to cause a denial of service application crash or possibly have other unspecified impacts via a...

CVE-2019-10655

Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow via...

Authentication flaw

Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow via...

CVE-2019-10655

Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow via...

CVE-2019-10655

CVE-2019-10655: Grandstream remote code execution vulnerability affects Grandstream GAC2500 (1.0.3.35), GXP2200 (1.0.3.27), GVC3202 (1.0.3.51), GXV3275 (before 1.0.3.219 Beta), and GXV3240 (before 1.0.3.219 Beta). The issue enables unauthenticated RCE via shell metacharacters in the /manager?acti...

Lighttpd < 1.4.50 Multiple Vulnerabilities

Lighttpd is prone to multiple path traversal and use-after-free vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Lighttpd < 1.4.51 Multiple Vulnerabilities

Lighttpd is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:lighttpd:lighttpd"; ifdescription...

lighttpd < 1.4.50 Multiple Vulnerabilities

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.50. It is, therefore, affected by the following vulnerabilities according to its release notes: - An unspecified potential path traversal in modalias - An unspecified user-after-free in core - An unspecifi...

lighttpd < 1.4.51 Multiple Vulnerabilities

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.51. It is, therefore, affected by the following vulnerabilities according to its release notes: - An unspecified header processing vulnerability in core - An unspecified username vulnerability in moduserdi...

Security Bulletin: IBM System x Integrated Management Module (IMM) Lighttpd W (CVE-2011-4362, CVE-2010-0295, CVE-2008-4360, CVE-2008-4359, CVE-20084298, CVE-2008-1531)

Summary Older versions of lighttpd, used by System x IMM contain multiple vulnerabilities. Vulnerability Details Abstract Older versions of lighttpd, used by System x IMM contain multiple vulnerabilities. Content Vulnerability Details: CVE ID: CVE-2011-4362 Description: Integer signedness error i...

Fedora 28 : lighttpd (2018-a31054181a)

https://www.lighttpd.net/2018/10/14/1.4.51/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : lighttpd (2018-be770f97a6)

1.4.50. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 29 : lighttpd (2018-cd5a9c3c0f)

https://www.lighttpd.net/2018/10/14/1.4.51/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

lighttpd < 1.4.51 Multiple Vulnerabilities

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.51. It is, therefore, affected by the following vulnerabilities according to its release notes: - An unspecified header processing vulnerability in core - An unspecified username vulnerability in moduserdi...

lighttpd < 1.4.50 Multiple Vulnerabilities

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.50. It is, therefore, affected by the following vulnerabilities according to its release notes: - An unspecified potential path traversal in modalias - An unspecified user-after-free in core - An unspecifi...

FreeBSD : lighttpd - use-after-free vulnerabilities (92a6efd0-e40d-11e8-ada4-408d5cf35399)

Lighttpd Project reports : Security fixes for Lighttpd : - security: process headers after combining folded headers C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

UBUNTU-CVE-2018-19052

An issue was discovered in modaliasphysicalhandler in modalias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific modalias configuration where the matched alias lacks a trailing '/' character, but the alias target...

CVE-2018-19052

An issue was discovered in modaliasphysicalhandler in modalias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific modalias configuration where the matched alias lacks a trailing '/' character, but the alias target...