CVE-2014-2324

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.

Múltiples vulnerabilidades de salto de directorio en (1) mod_evhost y (2) mod_simple_vhost en lighttpd anterior a 1.4.35 permiten a atacantes remotos leer archivos arbitrarios a través de un .. (punto punto) en el nombre de host, relacionado con request_check_hostname.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-03-12 CVE Reserved
2014-03-13 CVE Published
2024-08-06 CVE Updated
2024-08-06 First Exploit
2024-09-29 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (13)

URL	Tag	Source
http://jvn.jp/en/jp/JVN37417423/index.html	Third Party Advisory
http://seclists.org/oss-sec/2014/q1/564	Mailing List
http://secunia.com/advisories/57404	Not Applicable
http://secunia.com/advisories/57514	Not Applicable
http://www.securityfocus.com/bid/66157	Third Party Advisory

URL	Date	SRC
http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2014_01.txt	2024-08-06
http://seclists.org/oss-sec/2014/q1/561	2024-08-06

URL	Date	SRC
http://www.lighttpd.net/2014/3/12/1.4.35	2021-02-24

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00023.html	2021-02-24
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00002.html	2021-02-24
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00006.html	2021-02-24
http://marc.info/?l=bugtraq&m=141576815022399&w=2	2021-02-24
http://www.debian.org/security/2014/dsa-2877	2021-02-24

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Contec Search vendor "Contec"	Sv-cpt-mc310 Firmware Search vendor "Contec" for product "Sv-cpt-mc310 Firmware"	< 6.5 Search vendor "Contec" for product "Sv-cpt-mc310 Firmware" and version " < 6.5"	-	Affected	in	Contec Search vendor "Contec"	Sv-cpt-mc310 Search vendor "Contec" for product "Sv-cpt-mc310"	-	-	Safe
Lighttpd Search vendor "Lighttpd"		Lighttpd Search vendor "Lighttpd" for product "Lighttpd"				< 1.4.35 Search vendor "Lighttpd" for product "Lighttpd" and version " < 1.4.35"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				6.0 Search vendor "Debian" for product "Debian Linux" and version "6.0"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				7.0 Search vendor "Debian" for product "Debian Linux" and version "7.0"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0"		-		Affected
Opensuse Search vendor "Opensuse"		Opensuse Search vendor "Opensuse" for product "Opensuse"				11.4 Search vendor "Opensuse" for product "Opensuse" and version "11.4"		-		Affected
Opensuse Search vendor "Opensuse"		Opensuse Search vendor "Opensuse" for product "Opensuse"				12.3 Search vendor "Opensuse" for product "Opensuse" and version "12.3"		-		Affected
Opensuse Search vendor "Opensuse"		Opensuse Search vendor "Opensuse" for product "Opensuse"				13.1 Search vendor "Opensuse" for product "Opensuse" and version "13.1"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise High Availability Extension Search vendor "Suse" for product "Linux Enterprise High Availability Extension"				11 Search vendor "Suse" for product "Linux Enterprise High Availability Extension" and version "11"		sp3		Affected
Suse Search vendor "Suse"		Linux Enterprise Software Development Kit Search vendor "Suse" for product "Linux Enterprise Software Development Kit"				11 Search vendor "Suse" for product "Linux Enterprise Software Development Kit" and version "11"		sp3		Affected