Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-1531
HistoryMar 27, 2008 - 11:44 p.m.

CVE-2008-1531

2008-03-2723:44:00
mitre
web.nvd.nist.gov
74
4
security
vulnerability
lighttpd
denial of service
ssl
nvd
cve-2008-1531

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.1

Percentile

95.0%

JSON

The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.

Affected configurations

Nvd
Node
lighttpdlighttpdRange≤1.4.19
OR
lighttpdlighttpdRange1.5–1.5.0
Node
debiandebian_linuxMatch4.0
VendorProductVersionCPE
lighttpdlighttpd*cpe:2.3:a:lighttpd:lighttpd:*:*:*:*:*:*:*:*
debiandebian_linux4.0cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

References

Social References

More

Related

debian 3
redhatcve 1
nessus 8
securityvulns 2
debiancve 1
cvelist 1
fedora 3
openvas 16
ubuntucve 1
prion 1
nvd 1
freebsd 1
seebug 1
gentoo 1
ibm 1
osv 1
debian
debian
[SECURITY] [DSA 1540-1] New lighttpd packages fix denial of service
2008-04-07 17:44:06
[SECURITY] [DSA 1540-3] New lighttpd packages fix regression
2008-07-23 18:59:43
[SECURITY] [DSA 1540-2] New lighttpd packages fix denial of service
2008-04-15 18:42:30
redhatcve
redhatcve
CVE-2008-1531
2019-10-04 22:02:39
nessus
nessus
Fedora 9 : lighttpd-1.4.19-4.fc9 (2008-4119)
2008-05-20 00:00:00
openSUSE 10 Security Update : lighttpd (lighttpd-5216)
2008-05-02 00:00:00
Fedora 8 : lighttpd-1.4.19-4.fc8 (2008-3376)
2008-05-01 00:00:00
securityvulns
securityvulns
lighthttpd SSL DoS
2008-04-01 00:00:00
rPSA-2008-0132-1 lighttpd
2008-04-01 00:00:00
debiancve
debiancve
CVE-2008-1531
2008-03-27 23:44:00
cvelist
cvelist
CVE-2008-1531
2008-03-27 23:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: lighttpd-1.4.19-4.fc9
2008-05-17 22:28:22
[SECURITY] Fedora 7 Update: lighttpd-1.4.19-4.fc7
2008-04-29 20:54:00
[SECURITY] Fedora 8 Update: lighttpd-1.4.19-4.fc8
2008-04-29 20:57:25
openvas
openvas
Fedora Update for lighttpd FEDORA-2008-4119
2009-02-17 00:00:00
Debian Security Advisory DSA 1540-2 (lighttpd)
2008-04-21 00:00:00
Debian Security Advisory DSA 1540-1 (lighttpd)
2008-04-21 00:00:00
ubuntucve
ubuntucve
CVE-2008-1531
2008-03-27 00:00:00
prion
prion
Design/Logic Flaw
2008-03-27 23:44:00
nvd
nvd
CVE-2008-1531
2008-03-27 23:44:00
freebsd
freebsd
lighttpd -- OpenSSL Error Queue Denial of Service Vulnerability
2008-04-02 00:00:00
seebug
seebug
Lighttpd SSL错误拒绝服务漏洞
2008-04-17 00:00:00
gentoo
gentoo
lighttpd: Multiple vulnerabilities
2008-04-10 00:00:00
ibm
ibm
Security Bulletin: IBM System x Integrated Management Module (IMM) Lighttpd W (CVE-2011-4362, CVE-2010-0295, CVE-2008-4360, CVE-2008-4359, CVE-20084298, CVE-2008-1531)
2019-01-30 08:20:01
osv
osv
lighttpd-1.4.59-2.1 on GA media
2024-06-15 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.1

Percentile

95.0%

JSON
Related for CVE-2008-1531
debian3redhatcve1nessus8securityvulns2debiancve1cvelist1fedora3openvas16ubuntucve1prion1nvd1freebsd1seebug1gentoo1ibm1osv1