Project

General

Profile

Actions
Copy link

Bug #2875

closed

CVE-2013-1599

Added by Caston about 7 years ago. Updated about 7 years ago.

Status:
Invalid
Priority:
Low
Category:
-
Target version:
-
ASK QUESTIONS IN Forums:

Description

I am doing a technical report on the security of security cameras. A fatal flaw in many cameras (most notably D-Link) described by CVE-2013-1599, appears to be a result of them using Lighttpd (at least that's what I got after watching https://youtu.be/B8DjTcANBx0?t=3m). Is this correct, and if so has Lighttpd responded and patched the vulnerability? Finally, what is the latest version of Lighttpd that the vulnerability exists on?

Please answer anything you can, and thank you very much.

Actions
Copy link
 #1

Updated by gstrauss about 7 years ago

  • Category deleted (3rd party)
  • Status changed from New to Invalid
  • Priority changed from Normal to Low
  • Target version deleted (1.4.x)

The CVE you referenced (from 2013) has not been published and you pointed to a BlackHat video from 2013 which demonstrated security holes in poorly written CGI, not in lighttpd. Please do your own homework.

Actions
Copy link
 #2

Updated by Caston about 7 years ago

gstrauss wrote:

So the vulnerability was not actually part of Lighttpd.? Okay, thanks.

"Please do your own homework."? What do think I am doing? If I had known Lighttpd was not involved I wouldn't have asked. And I am not forcing you to help me with my report, I mean it was nice (and thanks again), but you make it sound like I had forced you to answer.

Actions
Copy link
 #3

Updated by Caston about 7 years ago

No gstrauss didn't write that I did.

Actions
Copy link

Also available in: Atom