Sécurité informatique

SECURINFOS.INFO - Bulletins de sécurité informatique, Alertes et Protection

Debian : mise à jour pour lighttpd

07/03/2008 12H14
Référence Secunia : SA29275 
Date de publication : 2008-03-07

Risque : Non Critique. Niveau 2 sur 5.
Impact : Exposition d'informations systèmes, Exposition de données sensibles
Lieu : A distance


Solutions :
Correctif de l'éditeur

OS :
Debian GNU/Linux 4.0
Debian GNU/Linux instable alias sid

Référence CVE :
CVE-2008-1111


Description :
Debian a réalisé une mise à jour pour lighttpd. Cela corrige une vulnérabilité, qui pourrait être exploitée par des personnes malintentionnées pour divulguer des informations sensibles potentielles.


Solutions :
Appliquez les paquetages mis à jour.

-- Debian GNU/Linux 4.0 alias etch --

Archives sources :

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5.diff.gz

Taille/checksum MD5:36835 fa55bbf4bf1b9a555cc4b7b368a059f6
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13.orig.tar.gz

Taille/checksum MD5: 793309 3a64323b8482b0e8a6246dbfdb4c39dc
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5.dsc

Taille/checksum MD5: 1098 52f5881ec943188d8276c600902c84f5

Paquetages indépendants de l'architecture :

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-doc_1.4.13-4etch5_all.deb

Taille/checksum MD5:99430 b13f37c0c8b55e145e6f823d5dd82dee

Architecture Alpha (DEC Alpha) :

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_alpha.deb

Taille/checksum MD5:71646 3d0308407b0b089bb8d8a215503f20d8
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_alpha.deb

Taille/checksum MD5:59412 cf3dc4218076b66d5fb04e40cb6e6a03
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_alpha.deb

Taille/checksum MD5:64832 c58a1cfc4a506351ef2425f4e4018113
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_alpha.deb

Taille/checksum MD5:61170 0a2a5196ed776076f29fb8a85976387e
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_alpha.deb

Taille/checksum MD5:64402 58268f6c0dc00b8e0fe16f5cf93a6d86
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_alpha.deb

Taille/checksum MD5: 318776 55890a8afec6ff4fba50ff2e8ac4df6c

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_amd64.deb

Taille/checksum MD5:69738 92677861a76629b9a3361c2c338d5bb0
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_amd64.deb

Taille/checksum MD5:63434 98b26e827bb4c8a023239a90bfdb45a2
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_amd64.deb

Taille/checksum MD5:60586 a3c573b8d1f921fb93fd28e33ee86d4f
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_amd64.deb

Taille/checksum MD5:58994 de8951a3316888b5874f3b3ee0abe755
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_amd64.deb

Taille/checksum MD5:63726 0ca9bf4df2ca8260495146011e6d3a53
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_amd64.deb

Taille/checksum MD5: 297048 a12c33257671acdd291f41b7b7f8c64d

arm architecture (ARM)

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_arm.deb

Taille/checksum MD5: 286092 3821f3f07c614ccf1a98cdec79301a18
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_arm.deb

Taille/checksum MD5:58528 1e3e7f75c172bb082c7b083110194c9f
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_arm.deb

Taille/checksum MD5:60664 489518ec1610f510562a1d0a2dfcb940
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_arm.deb

Taille/checksum MD5:69414 41096405646828e7a63a6e4b208d5497
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_arm.deb

Taille/checksum MD5:62916 e74d042125f02400c48f2763d34e6d9a
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_arm.deb

Taille/checksum MD5:62718 3d19c37366365f0e7f3ee06da00df623

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_hppa.deb

Taille/checksum MD5: 324114 f8cc861ec3e948179387ee31f6f9f3b4
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_hppa.deb

Taille/checksum MD5:61616 fe5f56af17823da3ef58b9a0b8e6d298
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_hppa.deb

Taille/checksum MD5:72826 517acc9044c0d82adea99c3d1ca1f0cc
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_hppa.deb

Taille/checksum MD5:64824 81bd6d5482ce8a3c5179edeecfd08346
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_hppa.deb

Taille/checksum MD5:59764 5d3f99e779ef096348b6749e4c809ba4
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_hppa.deb

Taille/checksum MD5:65288 bdd83e24259d7f2922c3a95b8293b36c

Architecture i386 (Intel ia32) :

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_i386.deb

Taille/checksum MD5:58916 caed74881673974288bbc290b3ba3479
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_i386.deb

Taille/checksum MD5:63722 5363ca45b9753e937fa011b163e2f376
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_i386.deb

Taille/checksum MD5:63530 dda93744e3b76dd8f9e4a3dba20ca07a
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_i386.deb

Taille/checksum MD5:60684 fb1d5f0bcbabae22f148425b4c42fae5
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_i386.deb

Taille/checksum MD5:70772 73b0ecdcafb617bf8e2e442f1886d9b0
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_i386.deb

Taille/checksum MD5: 288902 30283b07cea3f0a26dc1a38b839f2807

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_ia64.deb

Taille/checksum MD5: 403296 6c366b8fed9ff23f19aaf50a66931a69
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_ia64.deb

Taille/checksum MD5:62884 0ccb5f79ae50fbc9967b7af053ff0e76
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_ia64.deb

Taille/checksum MD5:61006 84f8efd4a34a05253e02aae4ad9e666a
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_ia64.deb

Taille/checksum MD5:67184 3bd3cb49438d49c70436d106f97de40d
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_ia64.deb

Taille/checksum MD5:76888 b5d4d899efb03134815b04b570bb8174
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_ia64.deb

Taille/checksum MD5:67326 c3301e3405ea81adbcbfdb25e9175df6

Architecture mips (MIPS (Big Endian)) :

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_mips.deb

Taille/checksum MD5: 295944 7f5edffb4a6fa10cf0d57353d04939bc
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_mips.deb

Taille/checksum MD5:58380 8f124d373348b24428af69b411966c31
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_mips.deb

Taille/checksum MD5:59762 63dbb566d233a7ca46f646e6f31db643
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_mips.deb

Taille/checksum MD5:69048 a3002e94627fbe13a92f3750767ff833
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_mips.deb

Taille/checksum MD5:62456 4b933ff37574e18d94b518d2dd1ddce1
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_mips.deb

Taille/checksum MD5:62340 c62744ec6d7a84e13cda39089fc2cc40

Architecture mipsel (MIPS (Little Endian)) :

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_mipsel.deb

Taille/checksum MD5:69848 b01bc2ff253e183ccf000765acb86f81
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_mipsel.deb

Taille/checksum MD5:60592 5aa70a480157629fc6caa35309371236
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_mipsel.deb

Taille/checksum MD5:63194 a7d0666adf203cfc8a3089b7b27e7d27
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_mipsel.deb

Taille/checksum MD5:59104 1d57b007782bbb3116113b418aa4d7c7
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_mipsel.deb

Taille/checksum MD5: 297028 96a183bd09c3ecee7899fa322a3d249f
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_mipsel.deb

Taille/checksum MD5:63370 b1f2124c09cfce63f77814bdfaf89ec6

Architecture powerpc (PowerPC) :

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_powerpc.deb

Taille/checksum MD5:65218 22aa056a61b992c613453c4e42a18931
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_powerpc.deb

Taille/checksum MD5:64942 0a52051cdf863e7f4d07a784e9b999a6
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_powerpc.deb

Taille/checksum MD5:71590 497c515d7d21d17b47938bb3ca62c98a
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_powerpc.deb

Taille/checksum MD5: 323626 5d902bf2d0dad086610eed1a3ef399ff
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_powerpc.deb

Taille/checksum MD5:62298 5a6077d928a46f5412041586a79979a9
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_powerpc.deb

Taille/checksum MD5:60480 e6b803329d925e756ebae8f3b8a25f61

Architecture s390 (IBM S/390) :

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_s390.deb

Taille/checksum MD5:64456 652df202c4877e31a189fdab5d73c429
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_s390.deb

Taille/checksum MD5:71184 6a27ce3f4965c2f45063fc6a12fc95a1
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_s390.deb

Taille/checksum MD5:64062 a1916058ca6929ba5ede58cd6df1c9fd
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_s390.deb

Taille/checksum MD5:59412 34187112fc60034864b8d7e4ad058010
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_s390.deb

Taille/checksum MD5:60908 f457bf75d0034e57a2b037e091f1e8bc
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_s390.deb

Taille/checksum MD5: 307020 9eaba4e65073194a68936c9957051597

Architecture sparc (Sun SPARC/UltraSPARC) :

http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch5_sparc.deb

Taille/checksum MD5:63234 c488f5fd992c2e1bc594614259a81c6d
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch5_sparc.deb

Taille/checksum MD5:60348 643d00ff129a367c2f3f944ec3e9085d
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch5_sparc.deb

Taille/checksum MD5:58700 32e6ed5c3bec41941466a4929d1e25ab
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd_1.4.13-4etch5_sparc.deb

Taille/checksum MD5: 283968 973579db2fff4ba527bbcfb8a78b4fb5
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch5_sparc.deb

Taille/checksum MD5:69712 a5b419803f4c7fb418291327c45ce442
http://security.debian.org/pool/updates/main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch5_sparc.deb

Taille/checksum MD5:63262 1748dc5be4967ff3fab5b94863e2be74

-- Debian GNU/Linux instable alias sid --

Il est rapporté que, le problème seront corrigées bientôt.

Référence :
http://www.us.debian.org/security/2008/dsa-1513


Autres références :

SA29235:
http://secunia.com/advisories/29235/




Veuillez noter : L'information sur laquelle ce bulletin Secunia est basé provient d'un tiers sauf mention du contraire. Secunia collecte, valide, et vérifie tout les rapports de vulnérabilité issus de la recherche en sécurité de groupes, distributeurs ou autres.

Les noms, marques et enseignes cités sur ce site sont la propriété de leurs déposants respectifs.