CVE-2008-1111

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
• secunia.com/advisories/29209 · Vendor Advisory
• secunia.com/advisories/29235 · Vendor Advisory
• secunia.com/advisories/29268 · Vendor Advisory
• secunia.com/advisories/29275 · Vendor Advisory
• secunia.com/advisories/29318 · Vendor Advisory
• secunia.com/advisories/29622 · Vendor Advisory
• security.gentoo.org/glsa/glsa-200803-10.xml
• trac.lighttpd.net/trac/changeset/2107
• wiki.rpath.com/wiki/Advisories:rPSA-2008-0106
• debian.org/security/2008/dsa-1513
• securityfocus.com/archive/1/489465/100/0/threaded
• securityfocus.com/bid/28100
• vupen.com/english/advisories/2008/0763 · Vendor Advisory
• bugs.gentoo.org/show_bug.cgi
• exchange.xforce.ibmcloud.com/vulnerabilities/41008
• issues.rpath.com/browse/RPL-2326
• redhat.com/archives/fedora-package-announce/2008-March/msg00162.html
• redhat.com/archives/fedora-package-announce/2008-March/msg00180.html

lighttpd のその他の脆弱性

• CVE-2025-12642緊急 9.1lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Hea…
• CVE-2022-41556高 7.5A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a lar…
• CVE-2022-37797高 7.5In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received…
• CVE-2022-30780高 7.5Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connec…
• CVE-2022-22707中 5.9In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 b…