ID de Prueba:	1.3.6.1.4.1.25623.1.0.100449
Categoría:	Web Servers
Título:	Lighttpd < 1.4.20 Multiple Vulnerabilities
Resumen:	Lighttpd is prone to multiple security vulnerabilities.
Descripción:	Summary: Lighttpd is prone to multiple security vulnerabilities. Vulnerability Impact: Attackers can exploit this issue to bypass certain security restrictions and obtain sensitive information. This may lead to other attacks. Affected Software/OS: Lighttpd versions prior to 1.4.20. Solution: Update to version 1.4.20 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4360 BugTraq ID: 31600 http://www.securityfocus.com/bid/31600 Bugtraq: 20081030 rPSA-2008-0309-1 lighttpd (Google Search) http://www.securityfocus.com/archive/1/497932/100/0/threaded Debian Security Information: DSA-1645 (Google Search) http://www.debian.org/security/2008/dsa-1645 http://security.gentoo.org/glsa/glsa-200812-04.xml http://openwall.com/lists/oss-security/2008/09/30/1 http://openwall.com/lists/oss-security/2008/09/30/2 http://openwall.com/lists/oss-security/2008/09/30/3 http://secunia.com/advisories/32069 http://secunia.com/advisories/32132 http://secunia.com/advisories/32480 http://secunia.com/advisories/32834 http://secunia.com/advisories/32972 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.vupen.com/english/advisories/2008/2741 XForce ISS Database: lighttpd-moduserdir-info-disclosure(45689) https://exchange.xforce.ibmcloud.com/vulnerabilities/45689 Common Vulnerability Exposure (CVE) ID: CVE-2008-4359 BugTraq ID: 31599 http://www.securityfocus.com/bid/31599 XForce ISS Database: lighttpd-urlredirect-rewrite-info-disclosure(45690) https://exchange.xforce.ibmcloud.com/vulnerabilities/45690
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.