CVE-2013-4508
published 2013-11-08CVE-2013-4508: lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets…
PriorityP341high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
2.63%
83.8th percentile
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | lighttpd | < lighttpd 1.4.33-1+nmu1 (bookworm) | lighttpd 1.4.33-1+nmu1 (bookworm) |
| lighttpd | lighttpd | >= 0 < 1.4.33-1+nmu1 | 1.4.33-1+nmu1 |
| lighttpd | lighttpd | >= 0 < 1.4.33-1+nmu1 | 1.4.33-1+nmu1 |
| lighttpd | lighttpd | >= 0 < 1.4.33-1+nmu1 | 1.4.33-1+nmu1 |
| lighttpd | lighttpd | >= 0 < 1.4.33-1+nmu1 | 1.4.33-1+nmu1 |
| lighttpd | lighttpd | 1.4.24 – 1.4.33 | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv7.5HIGH
vendor_debian7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2013-4508: lighttpd - lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which ...
vendor_debian·2013·CVSS 7.5
CVE-2013-4508 [HIGH] CVE-2013-4508: lighttpd - lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which ...
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.
Scope: local
bookworm: resolved (fixed in 1.4.33-1+nmu1)
bullseye: resolved (fixed in 1.4.33-1+nmu1)
forky: resolved (fixed in 1.4.33-1+nmu1)
sid: resolved (fixed in 1.4.33-1+nmu1)
trixie: resolved (fixed in 1.4.33-1+nmu1)
GHSA
GHSA-vfqw-83ww-jr3v: lighttpd before 1
ghsa_unreviewed·2022-05-13
CVE-2013-4508 [HIGH] CWE-326 GHSA-vfqw-83ww-jr3v: lighttpd before 1
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.
OSV
CVE-2013-4508: lighttpd before 1
osv·2013-11-08·CVSS 7.5
CVE-2013-4508 [HIGH] CVE-2013-4508: lighttpd before 1
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-4508 lighttpd: uses vulnerable cipher suites when SNI is used
bugzilla·2013-11-05·CVSS 7.5
CVE-2013-4508 [HIGH] CVE-2013-4508 lighttpd: uses vulnerable cipher suites when SNI is used
CVE-2013-4508 lighttpd: uses vulnerable cipher suites when SNI is used
The following flaw was reported [1] in lighttpd. Currently a patch is in progress [2] but is not yet complete.
Lighttpd supported SNI (Server Name Indication) since version 1.4.24, and a typical SNI configuration would look like:
$HTTP["Host"] == "example.com" {
ssl.pemfile = "/etc/ssl/certs/example.com.pem"
}
$SERVER["socket"] == ":443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/ssl/certs/default.pem"
ssl.cipher-list = "HIGH"
}
This configuration is vulnerable as it will use ssl.cipher-list = "DEFAULT" for "example.com", which contains vulnerable cipher suites.
[1] http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_01.txt
[2] http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_ssl_sni.
Bugzilla
CVE-2013-4508 lighttpd: uses vulnerable cipher suites when SNI is used [fedora-all]
bugzilla·2013-11-05·CVSS 7.5
CVE-2013-4508 [HIGH] CVE-2013-4508 lighttpd: uses vulnerable cipher suites when SNI is used [fedora-all]
CVE-2013-4508 lighttpd: uses vulnerable cipher suites when SNI is used [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this iss
Bugzilla
CVE-2013-4508 lighttpd: uses vulnerable cipher suites when SNI is used [epel-all]
bugzilla·2013-11-05·CVSS 7.5
CVE-2013-4508 [HIGH] CVE-2013-4508 lighttpd: uses vulnerable cipher suites when SNI is used [epel-all]
CVE-2013-4508 lighttpd: uses vulnerable cipher suites when SNI is used [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this
arXiv
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
arxiv_fulltext·2022-12-29
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
## Abstract
Currently, the development of IoT firmware heavily depends on third-party components (TPCs) to improve development efficiency. Nevertheless, TPCs are not secure, and the vulnerabilities in TPCs will influence the security of IoT firmware. Existing works pay less attention to the vulnerabilities caused by TPCs, and we still lack a comprehensive understanding of the security impact of TPC vulnerability against firmware. To fill in the knowledge gap, we design and implement , which leverages syntactical features and control-flow graph features to detect the TPCs in firmware, and then recognizes the corresponding vulnerabilities. Based on , we present the first l
http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_01.txthttp://jvn.jp/en/jp/JVN37417423/index.htmlhttp://lists.opensuse.org/opensuse-updates/2014-01/msg00049.htmlhttp://marc.info/?l=bugtraq&m=141576815022399&w=2http://openwall.com/lists/oss-security/2013/11/04/19http://redmine.lighttpd.net/issues/2525http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2913/diff/https://www.debian.org/security/2013/dsa-2795http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_01.txthttp://jvn.jp/en/jp/JVN37417423/index.htmlhttp://lists.opensuse.org/opensuse-updates/2014-01/msg00049.htmlhttp://marc.info/?l=bugtraq&m=141576815022399&w=2http://openwall.com/lists/oss-security/2013/11/04/19http://redmine.lighttpd.net/issues/2525http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2913/diff/https://www.debian.org/security/2013/dsa-2795
2013-11-08
Published