NVD

Id
56082  
Name
CVE-2007-3946  
Description
mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving (1) a memory leak, (2) use of md5-sess without a cnonce, (3) base64 encoded strings, and (4) trailing whitespace in the Auth-Digest header.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-07-23  
Modified Date
2012-10-30  
Seq
2007-3946  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285606 56082 CVE-2007-3946 GLSA-200708-11  View
285607 56082 CVE-2007-3946 http://trac.lighttpd.net/trac/browser/branches/lighttpd-1.4.x/NEWS?rev=1875  View
285608 56082 CVE-2007-3946 http://trac.lighttpd.net/trac/changeset/1875  View
285609 56082 CVE-2007-3946 DSA-1362  View
285610 56082 CVE-2007-3946 SUSE-SR:2007:015  View
285611 56082 CVE-2007-3946 20070719 rPSA-2007-0145-1 lighttpd  View
285612 56082 CVE-2007-3946 24967  View
285613 56082 CVE-2007-3946 ADV-2007-2585  View
285614 56082 CVE-2007-3946 https://issues.rpath.com/browse/RPL-1550  View
285615 56082 CVE-2007-3946 https://issues.rpath.com/browse/RPL-1554  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55469 JVNDB-2007-004161 lighttpd の http_auth.c におけるサービス運用妨害 (DoS) の脆弱性 lighttpd の mod_auth (http_auth.c) には、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-3946 27301 CVE-2007-3946 56082 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004161.html 2007-07-23 2012-09-25 View