Debian/lighttpd: high 7.5
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtai
Action: Upgrade lighttpd to 1.4.33-1+nmu1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.33-1+nmu1 | - |
Fixed versions
| 1.4.33-1+nmu1 |
Sources
- osv: DEBIAN-CVE-2013-4508#Debian:13/lighttpd
- https://security-tracker.debian.org/tracker/CVE-2013-4508
published · modified · JSON