An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character.
References
| Link | Resource |
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00054.html | Mailing List Third Party Advisory |
| https://github.com/lighttpd/lighttpd1.4/commit/2105dae0f9d7a964375ce681e53cb165375f84c1 | Exploit Vendor Advisory |
| https://lists.debian.org/debian-lts-announce/2022/01/msg00012.html | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
31 Mar 2022, 19:48
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Opensuse backports Sle
Debian debian Linux Debian Opensuse leap Opensuse |
|
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2022/01/msg00012.html - Mailing List, Third Party Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00054.html - Mailing List, Third Party Advisory | |
| CPE | cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
18 Jan 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2018-11-07 05:29
Updated : 2023-12-10 12:44
NVD link : CVE-2018-19052
Mitre link : CVE-2018-19052
CVE.ORG link : CVE-2018-19052
JSON object : View
Products Affected
lighttpd
- lighttpd
debian
- debian_linux
suse
- suse_linux_enterprise_server
opensuse
- leap
- backports_sle
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')