- Tue Mar 4 2008 Matthias Saou <http://freshrpms.net/>     1.4.18-3

    - Include patch for CVE-2008-0983 (crash when low on       file descriptors).

    - Include patch for CVE-2008-1111 (cgi source       disclosure).

    - Tue Oct 16 2007 Matthias Saou <http://freshrpms.net/>       1.4.18-2

    - Include mod_geoip additional source, make it an       optional sub-package.

    - Reorder sub-packages alphabetically in spec file.

    - Mon Sep 10 2007 Matthias Saou <http://freshrpms.net/>       1.4.18-1

    - Update to 1.4.18.

    - Include newly installed lighttpd-angel ('angel'       process meant to always run as root and restart       lighttpd when it crashes, spawn processes on SIGHUP),       but it's in testing stage and must be run with -D for       now.

  - Wed Sep 5 2007 Matthias Saou <http://freshrpms.net/>     1.4.17-1

    - Update to 1.4.17.

    - Update defaultconf patch to match new example       configuration.

    - Include patch to fix log file rotation with       max-workers set (trac #902).

    - Add /var/run/lighttpd/ directory where to put fastcgi       sockets.

    - Thu Aug 23 2007 Matthias Saou <http://freshrpms.net/>       1.4.16-3

    - Add /usr/bin/awk build requirement, used to get       LIGHTTPD_VERSION_ID.

    - Wed Aug 22 2007 Matthias Saou <http://freshrpms.net/>       1.4.16-2

    - Rebuild to fix wrong execmem requirement on ppc32.

    - Thu Jul 26 2007 Matthias Saou <http://freshrpms.net/>       1.4.16-1

    - Update to 1.4.16 security fix release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

バナーによると、リモートホストで実行されているlighttpdのバージョンは、1.4.19より前です。したがって、次の脆弱性の影響を受ける可能性があります。- lighttpdはファイル記述子配列のサイズを不適切に計算しているため、リモートの攻撃者が多数の接続を介して、領域外読み取りエラーの原因となるサービス拒否（クラッシュ）を引き起こす可能性があります。- lighttpdはフォークに失敗したときに500エラーの代わりにCGIスクリプトのソースコードを送信するため、リモートの攻撃者が秘密情報を取得する可能性があります。- userdir.pathが設定されていないとき、デフォルトの$HOMEが使用され、リモートの攻撃者が任意のファイルを読み取る可能性があります。Nessusはこれらの問題をテストしていませんが、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

Several local/remote vulnerabilities have been discovered in lighttpd, a fast webserver with minimal memory footprint.

The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2008-0983     lighttpd 1.4.18, and possibly other versions before     1.5.0, does not properly calculate the size of a file     descriptor array, which allows remote attackers to cause     a denial of service (crash) via a large number of     connections, which triggers an out-of-bounds access. 

  - CVE-2007-3948     connections.c in lighttpd before 1.4.16 might accept     more connections than the configured maximum, which     allows remote attackers to cause a denial of service     (failed assertion) via a large number of connection     attempts.

根據其標題，遠端主機上執行的 lighttpd 版本比 1.4.19 舊。因此可能受到下列多個弱點影響：- lighttpd 未正確計算檔案描述元陣列的大小，遠端攻擊者可藉以透過大量連線觸發超出邊界存取，進而造成拒絕服務 (損毀)。- 發生分支錯誤時，lighttpd 會傳送 CGI 指令碼的原始程式碼，而非 500 錯誤，遠端攻擊者可藉以取得敏感資訊。- 若在未設定 userdir.path 的情況下使用 $HOME 預設值，遠端攻擊者可能可藉以讀取任意檔案。請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.19. Therefore, it may be, affected by the following vulnerabilities :

  - lighttpd does not properly calculate the size of a file descriptor     array, which allows remote attackers to cause a denial of service     (crash) via a large number of connections, which triggers an     out-of-bounds access.

  - lighttpd sends the source code of CGI scripts instead of a 500     error when a fork failure occurs, which might allow remote     attackers to obtain sensitive information.

  - When userdir.path is not set, uses a default of $HOME, which     might allow remote attackers to read arbitrary files.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

- Remote attackers were able to crash lighttpd by opening     a large number of connections (CVE-2008-0983).

  - A bug in mod_cgi allowed remote attackers to read cgi     source files (CVE-2008-1111).

  - A bug in mod_userdir allowed remote attackers to read     arbitrary files (CVE-2008-1270).

- Tue Mar 4 2008 Matthias Saou <http://freshrpms.net/>     1.4.18-6

    - Include patch for CVE-2008-0983 (crash when low on       file descriptors).

    - Include patch for CVE-2008-1111 (cgi source       disclosure).

    - Tue Feb 19 2008 Fedora Release Engineering <rel-eng at       fedoraproject.org>

    - Autorebuild for GCC 4.3

    - Wed Dec 5 2007 Release Engineering <rel-eng at       fedoraproject dot org>

    - Rebuild for deps

    - Wed Oct 31 2007 Matthias Saou <http://freshrpms.net/>       1.4.18-3

    - Update mod_geoip source to fix segfault upon stopping       lighttpd.

    - Mon Oct 22 2007 Matthias Saou <http://freshrpms.net/>       1.4.18-2

    - Include mod_geoip additional source, make it an       optional sub-package.

    - Reorder sub-packages alphabetically in spec file.

    - Make sub-packages require exact release, just in case.

    - Change default webroot back from /srv to /var.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200803-10 (lighttpd: Multiple vulnerabilities)

    lighttpd contains a calculation error when allocating the global file     descriptor array (CVE-2008-0983). Furthermore, it sends the source of a     CGI script instead of returning a 500 error (Internal Server Error)     when the fork() system call fails (CVE-2008-1111).
  Impact :

    A remote attacker could exploit these vulnerabilities to cause a Denial     of Service or gain the source of a CGI script.
  Workaround :

    There is no known workaround at this time.

根据其标题，远程主机上运行的 lighttpd 版本低于 1.4.19。因而可能会受到下列漏洞的影响：- lighttpd 未正确计算文件描述符数组的大小，允许远程攻击者通过大量连接触发越界访问，导致拒绝服务（崩溃）。- 发生分支错误时，lighttpd 发送 CGI 脚本的源代码，而非 500 错误，可能允许远程攻击者获得敏感信息。- 未设置 userdir.path 时使用默认 $HOME，可能允许远程攻击者读取任意文件。请注意，Nessus 并未测试这些问题，而是只依赖于应用程序自我报告的版本号。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
31371	Fedora 7 : lighttpd-1.4.18-3.fc7 (2008-2262)	Nessus	Fedora Local Security Checks	2008/3/7	2021/1/11	medium
106624	lighttpd < 1.4.19の複数の脆弱性	Nessus	Web Servers	2018/2/6	2018/2/7	medium
33507	Debian DSA-1609-1 : lighttpd - various	Nessus	Debian Local Security Checks	2008/7/16	2021/1/4	medium
106624	lighttpd < 1.4.19 多個弱點	Nessus	Web Servers	2018/2/6	2018/2/7	medium
106624	lighttpd < 1.4.19 Multiple Vulnerabilities	Nessus	Web Servers	2018/2/6	2018/2/7	medium
31775	openSUSE 10 Security Update : lighttpd (lighttpd-5107)	Nessus	SuSE Local Security Checks	2008/4/4	2021/1/14	medium
31372	Fedora 8 : lighttpd-1.4.18-6.fc8 (2008-2278)	Nessus	Fedora Local Security Checks	2008/3/7	2021/1/11	medium
31385	GLSA-200803-10 : lighttpd: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/3/7	2021/1/6	medium
106624	lighttpd < 1.4.19 多个漏洞	Nessus	Web Servers	2018/2/6	2018/2/7	medium

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

medium

medium

medium