oss-security - CVE request: lighttpd DoS: forcefully closing of foreign SSL connections

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Wed, 26 Mar 2008 17:26:59 +0100
From: Christian Hoffmann <hoffie@...too.org>
To: coley@...re.org
Subject: CVE request: lighttpd DoS: forcefully closing of foreign SSL connections

Hi,

can we please get a CVE id for the following issue?
https://bugs.gentoo.org/show_bug.cgi?id=214892
http://trac.lighttpd.net/trac/ticket/285#comment:18
http://trac.lighttpd.net/trac/changeset/2136

Impact is rather low, but I think it still qualifies for DoS.

Thanks,
-- 
Christian Hoffmann

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.