diff options
| author | mnag <mnag@FreeBSD.org> | 2007-09-10 21:37:24 +0800 |
|---|---|---|
| committer | mnag <mnag@FreeBSD.org> | 2007-09-10 21:37:24 +0800 |
| commit | 6852decafb6affb6a15025bb2ca07ae9e4eb6a9b (patch) | |
| tree | a5cad1d2dc9f8caeaee0915f8f341baefe2639cb /security | |
| parent | 5b16cd625bc767035230820099f6a2b211763dec (diff) | |
| download | freebsd-ports-gnome-6852decafb6affb6a15025bb2ca07ae9e4eb6a9b.tar.gz freebsd-ports-gnome-6852decafb6affb6a15025bb2ca07ae9e4eb6a9b.tar.zst freebsd-ports-gnome-6852decafb6affb6a15025bb2ca07ae9e4eb6a9b.zip | |
- lighttpd -- FastCGI header overrun in mod_fastcgi
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index e3d03c50b62e..add7f6c90748 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,37 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="4b673ae7-5f9a-11dc-84dd-000102cc8983"> + <topic>lighttpd -- FastCGI header overrun in mod_fastcgi</topic> + <affects> + <package> + <name>lighttpd</name> + <range><lt>1.4.18</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>lighttpd maintainer reports:</p> + <blockquote cite="http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt"> + <p>Lighttpd is prone to a header overflow when using the mod_fastcgi + extension, this can lead to arbitrary code execution in the fastcgi + application. For a detailed description of the bug see the external + reference.</p> + <p>This bug was found by Mattias Bengtsson and Philip Olausson</p> + </blockquote> + </body> + </description> + <references> + <url>http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt</url> + <url>http://secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/</url> + <cvename>CVE-2007-4727</cvename> + </references> + <dates> + <discovery>2007-09-09</discovery> + <entry>2007-09-10</entry> + </dates> + </vuln> + <vuln vid="f14ad681-5b88-11dc-812d-0011098b2f36"> <topic>rkhunter -- insecure temporary file creation</topic> <affects> |