OSVDB ID: 43169

Title: lighttpd mod_cgi Fork Failure CGI Source Disclosure

Info

Disclosure

Feb 28, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Unknown or Incomplete

Solution

Upgrade to version 1.4.19 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

FrSIRT Advisory: ADV-2008-0763
Bugtraq ID: 28100
Vendor Specific News/Changelog Entry: http://trac.lighttpd.net/trac/changeset/2107
https://bugs.gentoo.org/show_bug.cgi?id=211956
Other Advisory URL: http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106
http://www.debian.org/security/2008/dsa-1513
http://www.gentoo.org/security/en/glsa/glsa-200803-10.xml
http://www.us.debian.org/security/2008/dsa-1513
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00162.html
ISS X-Force ID: 41008
Vendor Specific Advisory URL: http://www.lighttpd.net/security/lighttpd_sa_2008_02.txt
Secunia Advisory ID: 29209 29235 29268 29275 29318 29622
CVE ID: 2008-1111 (see also: NVD)
Vendor Specific Solution URL: http://security.gentoo.org/glsa/glsa-200803-10.xml

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/36218