CVE-2013-4559
NoneCVSS
—
EPSS
10.7%
Published
Nov 20, 2013
CISA due date
—
The record
lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote attackers to gain privileges, as demonstrated by multiple calls to the clone function that cause setuid to fail when the user process limit is reached.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | lighttpd | 0 | 1.4.33-1+nmu1 |
| Debian:12 | lighttpd | 0 | 1.4.33-1+nmu1 |
| Debian:13 | lighttpd | 0 | 1.4.33-1+nmu1 |
| Debian:6.0 | lighttpd | 0 | 1.4.28-2+squeeze1.4 |
| Debian:7 | lighttpd | 0 | 1.4.31-4+deb7u1 |
| Mageia:2 | lighttpd | 0 | 1.4.30-5.3.mga2 |
| Mageia:3 | lighttpd | 0 | 1.4.32-3.6.mga3 |
| Ubuntu:14.04:LTS | lighttpd | 0 | 1.4.33-1+nmu2ubuntu2 |
| openSUSE:Tumbleweed | lighttpd | 0 | 1.4.37-1.6 |
Related vulnerabilities
- CVE-2015-3200 mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log… Also affects lighttpd
- CVE-2014-3566 The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses… Also affects lighttpd
- CVE-2014-2323 SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote… Also affects lighttpd
- CVE-2014-2324 Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost… Also affects lighttpd
- CVE-2012-5533 The http_request_split_value function in request.c in lighttpd before 1.4.32 allows… Also affects lighttpd
- CVE-2011-4362 Integer signedness error in the base64_decode function in the HTTP authentication… Also affects lighttpd
- CVE-2011-3389 The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft… Also affects lighttpd
- CVE-2010-0295 lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs… Also affects lighttpd