5 matches found
UBUNTU-CVE-2018-19052
An issue was discovered in modaliasphysicalhandler in modalias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific modalias configuration where the matched alias lacks a trailing '/' character, but the alias target...
PT-2018-19288
Name of the Vulnerable Software and Affected Versions lighttpd affected versions not specified Description The issue involves several security concerns, including potential path traversal in mod alias under specific configurations or use cases, use-after-free errors due to invalid Range requests ...
PT-2018-3498
Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.50 Description: An issue was discovered in mod alias physical handler in mod alias.c, allowing potential ../ path traversal of a single directory above an alias target. This occurs with a specific mod alias...
