CVE-2014-2323 SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.
CriticalCVSS 9.8
EPSS 62.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/lighttpd(Debian:12) | < 1.4.33-1+nmu3 | 1.4.33-1+nmu3 |
| debian/lighttpd(Debian:13) | < 1.4.33-1+nmu3 | 1.4.33-1+nmu3 |
| debian/lighttpd(Debian:14) | < 1.4.33-1+nmu3 | 1.4.33-1+nmu3 |
| lighttpd | < 1.4.35 | 1.4.35 |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| SUSE linux enterprise high availability extension | = 11-sp3 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp3 | No fix listed |
References
- Debian Security Tracker CVE-2014-2323 vendor-advisory
- download.lighttpd.net exploit vendor-advisory
- JVN#37417423 third-party-advisory
- openSUSE-SU-2014:0449 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2014:0474 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0496 mailing-list third-party-advisory vendor-advisory
- HPSBGN03191 mailing-list third-party-advisory vendor-advisory
- [oss-security] 20140312 lighttpd 1.4.34 SQL injection and path traversal CVE request exploit mailing-list third-party-advisory
- [oss-security] 20140312 Re: lighttpd 1.4.34 SQL injection and path traversal CVE request mailing-list third-party-advisory
- 57404 broken-link third-party-advisory
- 57514 broken-link third-party-advisory
- DSA-2877 third-party-advisory vendor-advisory
- www.lighttpd.net patch vendor-advisory
- bugs.debian.org issue-tracking