CVE-2014-2324 vulnerability in Lighttpd and Other Products
Published on March 14, 2014
Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.
Products Associated with CVE-2014-2324
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2014-2324 are published in these products:
Exploit Probability
EPSS
61.31%
Percentile
98.30%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.