• info
• discussion
• exploit
• solution
• references

LiteSpeed Web Server Null-Byte Handling Information Disclosure Vulnerability

Solution:
The vendor released LiteSpeed Web Server 3.2.4 to address this issue. Please see the references for more information.


Lite Speed Technologies LiteSpeed Web Server 3.2.3

• Lite Speed Technologies lsws-3.2.4-std-i386-freebsd.tar.gz
  http://www.litespeedtech.com/packages/3.0/lsws-3.2.4-std-i386-freebsd. tar.gz


• Lite Speed Technologies lsws-3.2.4-std-i386-freebsd6.tar.gz
  http://www.litespeedtech.com/packages/3.0/lsws-3.2.4-std-i386-freebsd6 .tar.gz


• Lite Speed Technologies lsws-3.2.4-std-i386-linux.tar.gz
  http://www.litespeedtech.com/packages/3.0/lsws-3.2.4-std-i386-linux.ta r.gz


• Lite Speed Technologies lsws-3.2.4-std-i386-osx.tar.gz
  http://www.litespeedtech.com/packages/3.0/lsws-3.2.4-std-i386-osx.tar. gz


• Lite Speed Technologies lsws-3.2.4-std-i386-solaris.tar.gz
  http://www.litespeedtech.com/packages/3.0/lsws-3.2.4-std-i386-solaris. tar.gz


• Lite Speed Technologies lsws-3.2.4-std-ppc-osx.tar.gz
  http://www.litespeedtech.com/packages/3.0/http://www.litespeedtech.com /packages/3.0/lsws-3.2.4-std-ppc-osx.tar.gz


• Lite Speed Technologies lsws-3.2.4-std-sparc-solaris.tar.gz
  http://www.litespeedtech.com/packages/3.0/lsws-3.2.4-std-sparc-solaris .tar.gz