Debian/lighttpd: high 7.5
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtai
Action: Upgrade lighttpd to 1.4.33-1+nmu1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.33-1+nmu1 | - |
Fixed versions
| 1.4.33-1+nmu1 |
Sources
published · modified · JSON