Test ID:	1.3.6.1.4.1.25623.1.0.59798
Category:	Fedora Local Security Checks
Title:	Fedora Core 7 FEDORA-2007-2132 (lighttpd)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to lighttpd announced via advisory FEDORA-2007-2132. Update Information: Lighttpd (1.4.17 and earlier) is prone to a header overflow when using the mod_fastcgi extension, this can lead to arbitrary code execution in the fastcgi application. This 1.4.18 update fixes the issue. References: [ 1 ] Bug #284511 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=284511 Solution: Apply the appropriate updates. This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-2132 Risk factor : High CVSS Score: 6.8
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4727 BugTraq ID: 25622 http://www.securityfocus.com/bid/25622 Bugtraq: 20070917 FLEA-2007-0054-1 lighttpd (Google Search) http://www.securityfocus.com/archive/1/479763/100/0/threaded http://fedoranews.org/updates/FEDORA-2007-213.shtml http://www.gentoo.org/security/en/glsa/glsa-200709-16.xml http://secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ https://bugzilla.redhat.com/show_bug.cgi?id=284511 http://secunia.com/advisories/26732 http://secunia.com/advisories/26794 http://secunia.com/advisories/26824 http://secunia.com/advisories/26997 http://secunia.com/advisories/27229 http://securityreason.com/securityalert/3127 SuSE Security Announcement: SUSE-SR:2007:020 (Google Search) http://www.novell.com/linux/security/advisories/2007_20_sr.html http://www.vupen.com/english/advisories/2007/3110 XForce ISS Database: lighttpd-modfastcgi-code-execution(36526) https://exchange.xforce.ibmcloud.com/vulnerabilities/36526
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.