| Package | Affected versions | Patched versions |
|---|---|---|
| lighttpd | ≥ 1.4.24, ≤ 1.4.33 |
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free