lighttpd < 1.4.35 Multiple Vulnerabilities

High Nessus Plugin ID 73123

Synopsis

The remote web server is affected by multiple vulnerabilities.

Description

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.35. It is, therefore, affected by the following vulnerabilities :

- A SQL injection flaw exists in the 'mod_mysql_vhost' module where user input passed using the hostname is not properly sanitized. A remote attacker can exploit this to inject or manipulate SQL queries, resulting in the manipulation or disclosure of data. (CVE-2014-2323)

- A traverse outside of restricted path flaw exists with the 'mod_evhost' and 'mod_simple_vhost' modules where user input passed using the hostname is not properly sanitized. A remote attacker can exploit this to gain access to potentially sensitive data. (CVE-2014-2324)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade to lighttpd version 1.4.35. Alternatively, apply the vendor-supplied patch.

See Also

http://www.lighttpd.net/2014/3/12/1.4.35/

http://www.nessus.org/u?08be46ff

http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2014_01.txt

http://www.nessus.org/u?c57451b6

Plugin Details

Severity: High

ID: 73123

File Name: lighttpd_1_4_35.nasl

Version: 1.10

Type: remote

Family: Web Servers

Published: 2014/03/20

Updated: 2018/07/12

Dependencies: 106628

Configuration: Enable paranoid mode

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSS v3.0

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:lighttpd:lighttpd

Required KB Items: installed_sw/lighttpd, Settings/ParanoidReport

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2014/03/12

Vulnerability Publication Date: 2014/03/12

Reference Information

CVE: CVE-2014-2323, CVE-2014-2324

BID: 66153, 66157