5

CVE-2007-1869

lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource consumption) by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lighttpd ≫ Lighttpd Version1.4.12
Lighttpd ≫ Lighttpd Version1.4.13
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.38% 0.872
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/24995
http://www.novell.com/linux/security/advisories/2007_007_suse.html
http://secunia.com/advisories/24886
Vendor Advisory
http://secunia.com/advisories/24947
http://secunia.com/advisories/25166
http://secunia.com/advisories/25613
http://security.gentoo.org/glsa/glsa-200705-07.xml
http://www.debian.org/security/2007/dsa-1303
http://www.lighttpd.net/assets/2007/4/13/lighttpd_sa2007_01.txt
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/466464/30/6900/threaded
http://www.securityfocus.com/bid/23515
http://www.vupen.com/english/advisories/2007/1399
https://exchange.xforce.ibmcloud.com/vulnerabilities/33671
https://issues.rpath.com/browse/RPL-1218