NVD

Id
4188  
Name
CVE-2008-4360  
Description
mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-10-03  
Modified Date
2011-03-07  
Seq
2008-4360  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26667 4188 CVE-2008-4360 SUSE-SR:2008:026  View
26668 4188 CVE-2008-4360 [oss-security] 20080930 Re: CVE request: lighttpd issues  View
26669 4188 CVE-2008-4360 [oss-security] 20080930 Re: CVE request: lighttpd issues  View
26670 4188 CVE-2008-4360 [oss-security] 20080930 Re: Re: CVE request: lighttpd issues  View
26671 4188 CVE-2008-4360 GLSA-200812-04  View
26672 4188 CVE-2008-4360 http://trac.lighttpd.net/trac/changeset/2283  View
26673 4188 CVE-2008-4360 http://trac.lighttpd.net/trac/changeset/2308  View
26674 4188 CVE-2008-4360 http://trac.lighttpd.net/trac/ticket/1589  View
26675 4188 CVE-2008-4360 http://wiki.rpath.com/Advisories:rPSA-2008-0309  View
26676 4188 CVE-2008-4360 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309  View
26677 4188 CVE-2008-4360 DSA-1645  View
26678 4188 CVE-2008-4360 http://www.lighttpd.net/security/lighttpd-1.4.x_userdir_lowercase.patch  View
26679 4188 CVE-2008-4360 http://www.lighttpd.net/security/lighttpd_sa_2008_06.txt  View
26680 4188 CVE-2008-4360 20081030 rPSA-2008-0309-1 lighttpd  View
26681 4188 CVE-2008-4360 31600  View
26682 4188 CVE-2008-4360 ADV-2008-2741  View
26683 4188 CVE-2008-4360 lighttpd-moduserdir-info-disclosure(45689)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49592 JVNDB-2008-004902 lighttpd の mod_userdir におけるアクセス制限を回避される脆弱性 lighttpd の mod_userdir には、大文字と小文字を区別しない OS またはファイルシステムが使用されている際、設定オプションのファイル名コンポーネントで大文字と小文字の比較が実行されるため、アクセス制限を回避される脆弱性が存在します。 CVE-2008-4360 34473 CVE-2008-4360 4188 7.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004902.html 2008-10-03 2012-09-25 View