CVE-2014-2324

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary…

published March 14, 2014

CVSS
—
EPSS
30%
Percentile
98.2
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.29521 · 98.2th percentile
Published
2014-03-14T15:00Z
EPSS history
Timeline
  • 14 MAR 15:00Z
    Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary…
    cvelistv5