Test Kennung:	1.3.6.1.4.1.25623.1.0.802044
Kategorie:	Denial of Service
Titel:	Lighttpd 1.4.31 'Connection Header' DoS Vulnerability - Active Check
Zusammenfassung:	Lighttpd is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: Lighttpd is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to an error when processing certain Connection header values leading to enter in an endless loop denying further request processing. Vulnerability Impact: Successful exploitation could allow attackers to cause a denial of service via crafted Connection header values. Affected Software/OS: Lighttpd version 1.4.31 only. Solution: Update to version 1.4.32 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-5533 BugTraq ID: 56619 http://www.securityfocus.com/bid/56619 http://www.exploit-db.com/exploits/22902 HPdes Security Advisory: HPSBGN03191 http://marc.info/?l=bugtraq&m=141576815022399&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2013:100 http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.31_fix_connection_header_dos.patch http://packetstormsecurity.org/files/118282/Simple-Lighttpd-1.4.31-Denial-Of-Service.html http://www.openwall.com/lists/oss-security/2012/11/21/1 http://osvdb.org/87623 http://www.securitytracker.com/id?1027802 http://secunia.com/advisories/51268 http://secunia.com/advisories/51298 SuSE Security Announcement: openSUSE-SU-2012:1532 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-11/msg00044.html SuSE Security Announcement: openSUSE-SU-2014:0074 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00051.html XForce ISS Database: lighttpd-httprequestsplitvalue-dos(80213) https://exchange.xforce.ibmcloud.com/vulnerabilities/80213
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.