Directory Traversal Vulnerabilities in Lighttpd Web Server
CVE-2014-2324
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 74%
What is CVE-2014-2324?
Lighttpd versions prior to 1.4.35 are susceptible to multiple directory traversal vulnerabilities in the mod_evhost and mod_simple_vhost modules. This issue allows remote attackers to exploit a flaw in the hostname request processing function, enabling them to access arbitrary files on the server when crafting requests that include a sequence of dot-dot ('..') in the hostname. This can lead to unauthorized information disclosure and potential security breaches if exploited.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.