oss-sec mailing list archives

Re: CVE request: lighttpd DoS: forcefully closing of foreign SSL connections

From: Christian Hoffmann <hoffie () gentoo org>
Date: Fri, 28 Mar 2008 15:43:51 +0100

On 2008-03-26 17:26, Christian Hoffmann wrote:

can we please get a CVE id for the following issue?
https://bugs.gentoo.org/show_bug.cgi?id=214892
http://trac.lighttpd.net/trac/ticket/285#comment:18
http://trac.lighttpd.net/trac/changeset/2136

Impact is rather low, but I think it still qualifies for DoS.

Just for reference, apparently CVE-2008-1531 has been assigned to thisissue, thanks to whoever did it. :)


--
Christian Hoffmann

Attachment: signature.asc
Description: OpenPGP digital signature

Current thread:

CVE request: lighttpd DoS: forcefully closing of foreign SSL connections Christian Hoffmann (Mar 26)
- Re: CVE request: lighttpd DoS: forcefully closing of foreign SSL connections Christian Hoffmann (Mar 28)
  - Re: CVE request: lighttpd DoS: forcefully closing of foreign SSL connections Steven M. Christey (Mar 31)