Oval Definition:
oval:org.opensuse.security:def:20071869
Revision Date
:
2022-06-30
Version
:
1
Title
:
CVE-2007-1869
Description
:
lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource consumption) by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2007-1869
Mitre CVE-2007-1869
SUSE CVE-2007-1869
SUSE-SR:2007:007
SUSE-SR:2007:007
Platform(s)
:
openSUSE 10.2
openSUSE Tumbleweed
SUSE LINUX 10.1
SUSE Linux Enterprise Software Development Kit 11 SP4
Product(s)
:
Definition Synopsis
suse101 is installed
AND
lighttpd less than 1.4.10-11.5
Definition Synopsis
SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
AND
Package Information
lighttpd-1.4.20-2.54 is installed
OR
lighttpd-mod_cml-1.4.20-2.54 is installed
OR
lighttpd-mod_magnet-1.4.20-2.54 is installed
OR
lighttpd-mod_mysql_vhost-1.4.20-2.54 is installed
OR
lighttpd-mod_rrdtool-1.4.20-2.54 is installed
OR
lighttpd-mod_trigger_b4_dl-1.4.20-2.54 is installed
OR
lighttpd-mod_webdav-1.4.20-2.54 is installed
Definition Synopsis
openSUSE Tumbleweed is installed
AND
Package Information
lighttpd-1.4.59-2.1 is installed
OR
lighttpd-mod_authn_gssapi-1.4.59-2.1 is installed
OR
lighttpd-mod_authn_ldap-1.4.59-2.1 is installed
OR
lighttpd-mod_authn_mysql-1.4.59-2.1 is installed
OR
lighttpd-mod_authn_pam-1.4.59-2.1 is installed
OR
lighttpd-mod_authn_sasl-1.4.59-2.1 is installed
OR
lighttpd-mod_cml-1.4.59-2.1 is installed
OR
lighttpd-mod_magnet-1.4.59-2.1 is installed
OR
lighttpd-mod_maxminddb-1.4.59-2.1 is installed
OR
lighttpd-mod_mysql_vhost-1.4.59-2.1 is installed
OR
lighttpd-mod_rrdtool-1.4.59-2.1 is installed
OR
lighttpd-mod_trigger_b4_dl-1.4.59-2.1 is installed
OR
lighttpd-mod_vhostdb_dbi-1.4.59-2.1 is installed
OR
lighttpd-mod_vhostdb_ldap-1.4.59-2.1 is installed
OR
lighttpd-mod_vhostdb_mysql-1.4.59-2.1 is installed
OR
lighttpd-mod_vhostdb_pgsql-1.4.59-2.1 is installed
OR
lighttpd-mod_webdav-1.4.59-2.1 is installed
BACK