NVD

Id
1475  
Name
CVE-2008-1531  
Description
The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-03-27  
Modified Date
2011-10-11  
Seq
2008-1531  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
9553 1475 CVE-2008-1531 SUSE-SR:2008:011  View
9554 1475 CVE-2008-1531 GLSA-200804-08  View
9555 1475 CVE-2008-1531 http://trac.lighttpd.net/trac/changeset/2136  View
9556 1475 CVE-2008-1531 http://trac.lighttpd.net/trac/changeset/2139  View
9557 1475 CVE-2008-1531 http://trac.lighttpd.net/trac/changeset/2140  View
9558 1475 CVE-2008-1531 http://trac.lighttpd.net/trac/ticket/285#comment:18  View
9559 1475 CVE-2008-1531 http://trac.lighttpd.net/trac/ticket/285#comment:21  View
9560 1475 CVE-2008-1531 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0132  View
9561 1475 CVE-2008-1531 DSA-1540  View
9562 1475 CVE-2008-1531 20080331 rPSA-2008-0132-1 lighttpd  View
9563 1475 CVE-2008-1531 28489  View
9564 1475 CVE-2008-1531 ADV-2008-1063  View
9565 1475 CVE-2008-1531 lighttpd-sslerror-dos(41545)  View
9566 1475 CVE-2008-1531 https://bugs.gentoo.org/show_bug.cgi?id=214892  View
9567 1475 CVE-2008-1531 https://issues.rpath.com/browse/RPL-2407  View
9568 1475 CVE-2008-1531 FEDORA-2008-3343  View
9569 1475 CVE-2008-1531 FEDORA-2008-3376  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48960 JVNDB-2008-004270 lighttpd の connections.c におけるサービス運用妨害 (DoS) の脆弱性 lighttpd の connection_state_machine 関数 (connections.c) は、サービス運用妨害 (アクティブ SSL 接続の損失) 状態となる脆弱性が存在します。 CVE-2008-1531 31644 CVE-2008-1531 1475 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004270.html 2008-03-27 2012-09-25 View