CVE-2013-4508 in lighttpd
Resumen (Inglés)
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.
Reservar
2013-06-12
Divulgación
2013-11-07
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 11097 | lighttpd ssl.cipher-lister cifrado débil | 310 | Prueba de concepto | Arreglo oficial | CVE-2013-4508 |