Test Kennung:	1.3.6.1.4.1.25623.1.0.802072
Kategorie:	Web Servers
Titel:	Lighttpd < 1.4.35 Multiple Vulnerabilities - Active Check
Zusammenfassung:	Lighttpd is prone to multiple vulnerabilities.
Beschreibung:	Summary: Lighttpd is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2014-2323: mod_mysql_vhost module is not properly sanitizing user supplied input passed via the hostname - CVE-2014-2324: mod_evhost and mod_simple_vhost modules are not properly sanitizing user supplied input via the hostname Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary SQL commands and remote attackers to read arbitrary files via hostname. Affected Software/OS: Lighttpd versions prior to 1.4.35. Solution: Update to version 1.4.35 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2323 Debian Security Information: DSA-2877 (Google Search) http://www.debian.org/security/2014/dsa-2877 HPdes Security Advisory: HPSBGN03191 http://marc.info/?l=bugtraq&m=141576815022399&w=2 http://jvn.jp/en/jp/JVN37417423/index.html http://seclists.org/oss-sec/2014/q1/564 http://seclists.org/oss-sec/2014/q1/561 http://secunia.com/advisories/57404 http://secunia.com/advisories/57514 SuSE Security Announcement: SUSE-SU-2014:0474 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00002.html SuSE Security Announcement: openSUSE-SU-2014:0449 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00023.html SuSE Security Announcement: openSUSE-SU-2014:0496 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2014-2324 BugTraq ID: 66157 http://www.securityfocus.com/bid/66157
Copyright	Copyright (C) 2014 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.