NVD

Id
56085  
Name
CVE-2007-3949  
Description
mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings.  
Reject
 
CVSS Version
2  
CVSS Score
8.3  
Severity
High  
CVSS Base Score
8.3  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:C)  
Pub Date
2017-01-07  
Published
2007-07-23  
Modified Date
2012-10-30  
Seq
2007-3949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285632 56085 CVE-2007-3949 GLSA-200708-11  View
285633 56085 CVE-2007-3949 http://trac.lighttpd.net/trac/changeset/1871  View
285634 56085 CVE-2007-3949 http://trac.lighttpd.net/trac/ticket/1230  View
285635 56085 CVE-2007-3949 DSA-1362  View
285636 56085 CVE-2007-3949 http://www.lighttpd.net/2007/7/24/1-4-16-let-s-ship-it  View
285637 56085 CVE-2007-3949 SUSE-SR:2007:015  View
285638 56085 CVE-2007-3949 20070719 rPSA-2007-0145-1 lighttpd  View
285639 56085 CVE-2007-3949 24967  View
285640 56085 CVE-2007-3949 ADV-2007-2585  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55472 JVNDB-2007-004164 lighttpd の mod_access.c における url.access-deny 設定を回避される脆弱性 lighttpd の mod_access.c は、URL の末尾の / (スラッシュ) 文字を無視するため、url.access-deny 設定を回避される脆弱性が存在します。 CVE-2007-3949 27304 CVE-2007-3949 56085 8.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004164.html 2007-07-23 2012-09-25 View