|
Bugtraq ID:
|
23515
|
|
Class:
|
Failure to Handle Exceptional Conditions
|
|
CVE:
|
CVE-2007-1870
CVE-2007-1869
|
|
Remote:
|
Yes
|
|
Local:
|
No
|
|
Published:
|
Apr 16 2007 12:00AM
|
|
Updated:
|
Jun 11 2007 04:50PM
|
|
Credit:
|
Robert Jakabosky discovered and fixed the CRLF vulnerability. The mtime vulnerability was discovered by cubiq and fixed by Marcus Rueckert.
|
|
Vulnerable:
|
SuSE SUSE Linux Enterprise Server 9 SP3
SuSE SUSE Linux Enterprise Server 10
SuSE SUSE Linux Enterprise SDK 9
SuSE SUSE Linux Enterprise SDK 10
SuSE SUSE Linux Enterprise SDK 10
SuSE Suse Linux Enterprise Desktop 10
SuSE Linux Openexchange Server
SuSE Linux Enterprise Server 9-SP3
+
Linux kernel 2.6.5
SuSE Linux Enterprise Server 10
+
Linux kernel 2.6.5
SuSE Linux Desktop 1.0
SuSE Linux Desktop 10
SuSE Linux 10.1 x86-64
SuSE Linux 10.1 x86
SuSE Linux 10.1 ppc
SuSE Linux 10.0 x86-64
SuSE Linux 10.0 x86
SuSE Linux 10.0 ppc
S.u.S.E. UnitedLinux 1.0
S.u.S.E. SuSE Linux School Server for i386
S.u.S.E. SUSE LINUX Retail Solution 8.0
S.u.S.E. SuSE Linux Openexchange Server 4.0
S.u.S.E. SuSE Linux Open-Xchange 4.1
S.u.S.E. SUSE CORE 9 for x86
S.u.S.E. openSUSE 10.2
S.u.S.E. Linux Professional 10.0 OSS
S.u.S.E. Linux Professional 10.0
S.u.S.E. Linux Professional 10.2
S.u.S.E. Linux Professional 10.1
S.u.S.E. Linux Personal 10.0 OSS
S.u.S.E. Linux Personal 10.2 X86 64
S.u.S.E. Linux Personal 10.2
S.u.S.E. Linux Personal 10.1
S.u.S.E. Linux Office Server
S.u.S.E. Linux Enterprise Server for S/390 9.0
S.u.S.E. Linux Enterprise Server for S/390
S.u.S.E. Linux Database Server 0
S.u.S.E. Linux Connectivity Server
rPath rPath Linux 1
lighttpd lighttpd 1.4.13
lighttpd lighttpd 1.4.12
lighttpd lighttpd 1.4.11
lighttpd lighttpd 1.4.10
lighttpd lighttpd 1.4.9
lighttpd lighttpd 1.4.8
lighttpd lighttpd 1.4.7
lighttpd lighttpd 1.4.6
lighttpd lighttpd 1.4.5
lighttpd lighttpd 1.4.4
lighttpd lighttpd 1.4.3
lighttpd lighttpd 1.4.2
lighttpd lighttpd 1.4.1
lighttpd lighttpd 1.4
lighttpd lighttpd 1.3.10
lighttpd lighttpd 1.3.8
lighttpd lighttpd 1.3.7
lighttpd lighttpd 1.4.10a
Gentoo Linux
Foresight Linux Foresight Linux 1.1
Debian Linux 4.0 sparc
Debian Linux 4.0 s/390
Debian Linux 4.0 powerpc
Debian Linux 4.0 mipsel
Debian Linux 4.0 mips
Debian Linux 4.0 m68k
Debian Linux 4.0 ia-64
Debian Linux 4.0 ia-32
Debian Linux 4.0 hppa
Debian Linux 4.0 arm
Debian Linux 4.0 amd64
Debian Linux 4.0 alpha
Debian Linux 4.0
|
|
|
|
Not Vulnerable:
|
lighttpd lighttpd 1.4.14
|
