lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote attackers to gain privileges, as demonstrated by multiple calls to the clone function that cause setuid to fail when the user process limit is reached.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 01:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_02.txt - Vendor Advisory | |
| References | () http://jvn.jp/en/jp/JVN37417423/index.html - Third Party Advisory | |
| References | () http://lists.opensuse.org/opensuse-updates/2014-01/msg00049.html - Mailing List, Third Party Advisory | |
| References | () http://marc.info/?l=bugtraq&m=141576815022399&w=2 - Issue Tracking, Third Party Advisory | |
| References | () http://secunia.com/advisories/55682 - Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2013/11/12/4 - Mailing List, Third Party Advisory | |
| References | () https://kc.mcafee.com/corporate/index?page=content&id=SB10310 - Third Party Advisory | |
| References | () https://www.debian.org/security/2013/dsa-2795 - Third Party Advisory |
Information
Published : 2013-11-20 14:12
Updated : 2024-11-21 01:55
NVD link : CVE-2013-4559
Mitre link : CVE-2013-4559
CVE.ORG link : CVE-2013-4559
JSON object : View
Products Affected
debian
- debian_linux
opensuse
- opensuse
lighttpd
- lighttpd
CWE
CWE-264
Permissions, Privileges, and Access Controls