Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-2324
HistoryMar 14, 2014 - 12:00 a.m.

CVE-2014-2324

2014-03-1400:00:00
ubuntu.com
ubuntu.com
15

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.956 High

EPSS

Percentile

99.4%

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2)
mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read
arbitrary files via a … (dot dot) in the host name, related to
request_check_hostname.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlighttpd< 1.4.33-1+nmu2ubuntu2.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.956 High

EPSS

Percentile

99.4%