|
|
| |
|
| |
lighttpd: denial of service
| Package(s): | lighttpd |
CVE #(s): | CVE-2007-1869
CVE-2007-1870
|
| Created: | April 18, 2007 |
Updated: | June 11, 2007 |
| Description: |
lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of
service (cpu and resource consumption) by disconnecting while lighttpd is
parsing CRLF sequences, which triggers an infinite loop and file descriptor
consumption. (CVE-2007-1869)
lighttpd before 1.4.14 allows attackers to cause a denial of service
(crash) via a request to a file whose mtime is 0, which results in a NULL
pointer dereference. (CVE-2007-1870) |
| Alerts: |
|
( Log in to post comments)
|
|
|