Description

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.

Remediation

References

CVE-2014-2324

Related Vulnerabilities

Oracle Database Server CVE-2009-1015 Vulnerability (CVE-2009-1015)

Oracle Database Server CVE-2015-2586 Vulnerability (CVE-2015-2586)

WordPress Plugin WP Post Popup Directory Traversal (2.1.1)

YOURLS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3783)

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.11)

Severity

Medium

Classification

CVE-2014-2324 CWE-22

Tags

Missing Update Known Vulnerabilities