High severity · published Jun 9, 2015
CVE-2015-3200
mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a…
7.5
CVSS
9.9%
EPSS
No
On KEV
Description
mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a NULL and new line character.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)9.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Lighttpd · Lighttpd
through 1.4.35 · source: NVD
SO
Solaris · Oracle
11.3 · source: NVD
VC
Virtual Customer Access System · HP
through 15.07 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-3200
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-3200
Exploit
http://jaanuskp.blogspot.com/2015/05/cve-2015-3200.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163223.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163286.html
Vendor Advisory
http://redmine.lighttpd.net/issues/2646
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
www.securityfocus.com
http://www.securityfocus.com/bid/74813
More from Virtual Customer Access System
8.1
CVE-2016-0778
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are…