Lucene search
RootSSV:60476HistoryNov 23, 2012 - 12:00 a.m.
lighttpd畸形HTTP Connection域处理拒绝服务漏洞
2012-11-2300:00:00
Root
www.seebug.org
138
EPSS
0.663
Percentile
97.9%
CVE(CAN) ID: CVE-2012-5533
lighttpd是一款开源的轻量级Web服务器。
lighttpd 1.4.31在处理某些HTTP请求头时，"http_request_split_value()"函数(src/request.c)在处理特制的"Connection"报头域时会陷入无限循环。攻击者利用此漏洞可导致Lighttpd拒绝服务。
0
lighttpd 1.4.31
厂商补丁：
Lighttpd
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.31_fix_connection_header_dos.patch
Related
prion
prion
Cross site request forgery (csrf)
2012-11-24 20:55:00
ubuntucve
ubuntucve
CVE-2012-5533
2012-11-24 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-179)
2015-09-08 00:00:00
FreeBSD Ports: lighttpd
2012-11-26 00:00:00
Fedora Update for lighttpd FEDORA-2013-15345
2013-09-06 00:00:00
nessus
nessus
Fedora 18 : lighttpd-1.4.32-1.fc18 (2013-15344)
2013-09-04 00:00:00
Amazon Linux AMI : lighttpd (ALAS-2013-179)
2013-09-04 00:00:00
checkpoint_advisories
checkpoint_advisories
lighttpd Connection Header Parsing Denial of Service (CVE-2012-5533)
2012-12-16 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: lighttpd-1.4.32-1.fc18
2013-09-03 22:29:53
[SECURITY] Fedora 19 Update: lighttpd-1.4.32-1.fc19
2013-09-03 22:31:38
freebsd
freebsd
lighttpd -- remote DoS in header parsing
2012-11-17 00:00:00
debiancve
debiancve
CVE-2012-5533
2012-11-24 20:55:04
nvd
nvd
CVE-2012-5533
2012-11-24 20:55:04
cve
cve
CVE-2012-5533
2012-11-24 20:55:04
amazon
amazon
Medium: lighttpd
2013-04-11 17:24:00
seebug
seebug
lighttpd 1.4.31 Denial of Service PoC
2014-07-01 00:00:00
cvelist
cvelist
CVE-2012-5533
2012-11-24 20:00:00
exploitdb
exploitdb
lighttpd 1.4.31 - Denial of Service (PoC)
2012-11-22 00:00:00
zdt
zdt
lighttpd 1.4.31 Denial of Service PoC
2012-11-21 00:00:00
packetstorm
packetstorm
Simple Lighttpd 1.4.31 Denial Of Service
2012-11-22 00:00:00
exploitpack
exploitpack
lighttpd 1.4.31 - Denial of Service (PoC)
2012-11-22 00:00:00
myhack58
myhack58
gentoo
gentoo
lighttpd: Multiple vulnerabilities
2014-06-13 00:00:00
osv
osv
lighttpd-1.4.37-1.6 on GA media
2024-06-15 00:00:00