Description

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.

Remediation

References

CVE-2014-2324

Related Vulnerabilities

WordPress Plugin Visitor Maps and Who's Online Cross-Site Scripting (1.5.8.6)

WordPress Plugin SEO Redirection-301 Redirect Manager Cross-Site Scripting (7.3)

WordPress Plugin Instagram Feed Unspecified Vulnerability (1.10.2)

WordPress Plugin Post Pay Counter PHP Object Injection (2.730)

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Request Forgery (1.14.8)

Severity

Medium

Classification

CVE-2014-2324 CWE-22

Tags

Missing Update Known Vulnerabilities