CVE-2008-1531

Severity

43%

Complexity

86%

Confidentiality

48%

The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.

The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Overview

First reported 16 years ago

2008-03-27 23:44:00

Last updated 6 years ago

2018-10-31 19:23:00

Affected Software

Debian GNU/Linux 4.0

4.0

References

SUSE-SR:2008:011

Third Party Advisory

29505

Third Party Advisory

29544

Third Party Advisory

29636

Third Party Advisory

29649

Third Party Advisory

30023

Third Party Advisory

GLSA-200804-08

Third Party Advisory

http://trac.lighttpd.net/trac/changeset/2136

Broken Link, Vendor Advisory

http://trac.lighttpd.net/trac/changeset/2139

Broken Link, Vendor Advisory

http://trac.lighttpd.net/trac/changeset/2140

Broken Link, Vendor Advisory

http://trac.lighttpd.net/trac/ticket/285#comment:18

Vendor Advisory

http://trac.lighttpd.net/trac/ticket/285#comment:21

Vendor Advisory

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0132

Third Party Advisory

DSA-1540

Third Party Advisory

43788

Broken Link

20080331 rPSA-2008-0132-1 lighttpd

Third Party Advisory, VDB Entry

28489

Third Party Advisory, VDB Entry

ADV-2008-1063

Third Party Advisory

https://bugs.gentoo.org/show_bug.cgi?id=214892

Third Party Advisory

lighttpd-sslerror-dos(41545)

Third Party Advisory, VDB Entry

https://issues.rpath.com/browse/RPL-2407

Broken Link

FEDORA-2008-3343

Third Party Advisory

FEDORA-2008-3376

Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.