NVD

Id
4187  
Name
CVE-2008-4359  
Description
lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-03  
Modified Date
2011-03-07  
Seq
2008-4359  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26648 4187 CVE-2008-4359 SUSE-SR:2008:026  View
26649 4187 CVE-2008-4359 [oss-security] 20080930 Re: CVE request: lighttpd issues  View
26650 4187 CVE-2008-4359 [oss-security] 20080930 Re: CVE request: lighttpd issues  View
26651 4187 CVE-2008-4359 [oss-security] 20080930 Re: Re: CVE request: lighttpd issues  View
26652 4187 CVE-2008-4359 GLSA-200812-04  View
26653 4187 CVE-2008-4359 http://trac.lighttpd.net/trac/changeset/2278  View
26654 4187 CVE-2008-4359 http://trac.lighttpd.net/trac/changeset/2307  View
26655 4187 CVE-2008-4359 http://trac.lighttpd.net/trac/changeset/2309  View
26656 4187 CVE-2008-4359 http://trac.lighttpd.net/trac/changeset/2310  View
26657 4187 CVE-2008-4359 http://trac.lighttpd.net/trac/ticket/1720  View
26658 4187 CVE-2008-4359 http://wiki.rpath.com/Advisories:rPSA-2008-0309  View
26659 4187 CVE-2008-4359 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309  View
26660 4187 CVE-2008-4359 DSA-1645  View
26661 4187 CVE-2008-4359 http://www.lighttpd.net/security/lighttpd-1.4.x_rewrite_redirect_decode_url.patch  View
26662 4187 CVE-2008-4359 http://www.lighttpd.net/security/lighttpd_sa_2008_05.txt  View
26663 4187 CVE-2008-4359 20081030 rPSA-2008-0309-1 lighttpd  View
26664 4187 CVE-2008-4359 31599  View
26665 4187 CVE-2008-4359 ADV-2008-2741  View
26666 4187 CVE-2008-4359 lighttpd-urlredirect-rewrite-info-disclosure(45690)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49591 JVNDB-2008-004901 lighttpd におけるデータを変更される脆弱性 lighttpd は、URL の解読を実行する前に (1) url.redirect および (2) url.rewrite 設定パターンに対する URI を比較するため、アクセス制限を回避される、重要な情報を取得される、またはデータを変更される脆弱性が存在します。 CVE-2008-4359 34472 CVE-2008-4359 4187 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004901.html 2008-10-03 2012-09-25 View