lighthttpd SSL DoS
Published:		01.04.2008
Source:		BUGTRAQ
SecurityVulns ID:		8849
Type:		remote
Level:		4/10
Description:		Termination of one SSL connection may cause another concurrent SSL connection to terminate.

Affected:		LIGHTHTTPD : lighttpd 1.4
CVE:		CVE-2008-1531 (lighttpd 1.4.19 and earlier allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.)

Original document

RPATH, rPSA-2008-0132-1 lighttpd (01.04.2008)

Discuss:

Read or add your comments to this news (0 comments)