Lucene search
RootSSV:61850HistoryMar 19, 2014 - 12:00 a.m.
lighttpd目录遍历漏洞
2014-03-1900:00:00
Root
www.seebug.org
311
0.956 High
EPSS
Percentile
99.2%
CVE ID：CVE-2014-2324
Lighttpd是德国软件开发者Jan Kneschke所研发的一款开源的Web服务器，它的主要特点是仅需少量的内存及CPU资源即可达到同类网页服务器的性能。
lighttpd mod_evhost和mod_simple_vhost虚拟主机模块中存在目录遍历漏洞。远程攻击者可借助特制的主机名利用该漏洞读取任意文件。
0
lighttpd
目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：
http://www.lighttpd.net/2014/3/12/1.4.35/
Related
prion
prion
Directory traversal
2014-03-14 15:55:00
ubuntucve
ubuntucve
CVE-2014-2324
2014-03-14 00:00:00
cve
cve
CVE-2014-2324
2014-03-14 15:55:00
debiancve
debiancve
CVE-2014-2324
2014-03-14 15:55:00
openvas
openvas
Debian Security Advisory DSA 2877-1 (lighttpd - security update)
2014-03-12 00:00:00
SuSE Update for lighttpd openSUSE-SU-2014:0449-1 (lighttpd)
2014-04-03 00:00:00
openSUSE: Security Advisory for lighttpd (openSUSE-SU-2014:0496-1)
2014-04-10 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: lighttpd-1.4.35-1.fc19
2014-03-25 08:14:59
[SECURITY] Fedora 20 Update: lighttpd-1.4.35-1.fc20
2014-03-25 08:15:56
debian
debian
[SECURITY] [DSA 2877-1] lighttpd security update
2014-03-13 04:28:29
[SECURITY] [DSA 2877-1] lighttpd security update
2014-03-13 04:28:29
nessus
nessus
Debian DSA-2877-1 : lighttpd - security update
2014-03-14 00:00:00
openSUSE Security Update : lighttpd (openSUSE-SU-2014:0449-1)
2014-06-13 00:00:00
lighttpd < 1.4.35 Multiple Vulnerabilities
2014-03-13 00:00:00
suse
suse
lighttpd to 1.4.35 (important)
2014-03-26 17:04:44
Security update for lighttpd (important)
2014-04-03 19:04:18
lighttpd to 1.4.35 (important)
2014-04-08 21:06:06
securityvulns
securityvulns
[SECURITY] [DSA 2877-1] lighttpd security update
2014-03-24 00:00:00
lighttpd security vulnerabilities
2014-03-24 00:00:00
mageia
mageia
Updated lighttpd package fixes security vulnerabilities
2014-03-19 21:28:38
amazon
amazon
Medium: lighttpd
2014-06-03 14:50:00
osv
osv
lighttpd - security update
2014-03-12 00:00:00
kitploit
kitploit
Vision2 - Nmap's XML result parse and NVD's CPE correlation to search CVE
2017-09-08 13:30:00
jvn
jvn
JVN#37417423: Multiple vulnerabilities in SolarView Compact
2021-02-19 00:00:00