oss-security - Re: CVE request: lighttpd DoS: forcefully closing of foreign SSL connections

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Fri, 28 Mar 2008 15:43:51 +0100
From: Christian Hoffmann <hoffie@...too.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: lighttpd DoS: forcefully closing
 of foreign SSL connections

On 2008-03-26 17:26, Christian Hoffmann wrote:
> can we please get a CVE id for the following issue?
> https://bugs.gentoo.org/show_bug.cgi?id=214892
> http://trac.lighttpd.net/trac/ticket/285#comment:18
> http://trac.lighttpd.net/trac/changeset/2136
> 
> Impact is rather low, but I think it still qualifies for DoS.
Just for reference, apparently CVE-2008-1531 has been assigned to this 
issue, thanks to whoever did it. :)

-- 
Christian Hoffmann


[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.