Test ID:	1.3.6.1.4.1.25623.1.0.805591
Category:	Web Servers
Title:	Lighttpd < 1.4.36 'http_auth.c' RCE Vulnerability - Windows
Summary:	Lighttpd is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: Lighttpd is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The flaw exists due to an error in 'http_auth.c' which does not properly validate user-supplied input. Vulnerability Impact: Successful exploitation will allow a remote attacker to execute arbitrary code on affected system. Affected Software/OS: Lighttpd prior to version 1.4.36. Solution: Update to version 1.4.36 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3200 1032405 http://www.securitytracker.com/id/1032405 74813 http://www.securityfocus.com/bid/74813 FEDORA-2015-12250 http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163286.html FEDORA-2015-12252 http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163223.html http://jaanuskp.blogspot.com/2015/05/cve-2015-3200.html http://redmine.lighttpd.net/issues/2646 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375 https://kc.mcafee.com/corporate/index?page=content&id=SB10310
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.