Unscored DSA-2368-1 2 CVEs

lighttpd - several

Published Dec 20, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 5.0	lighttpd	1.4.19-5+lenny3
Debian · 6.0	lighttpd	1.4.28-2+squeeze1

Vulnerabilities 2

Unscored —

CVE-2011-3389 Public exploit EPSS 73%

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firef…

asterisk curl nss bouncycastle Debian

Sep 6, 2011
Unscored —

CVE-2011-4362 Public exploit EPSS 21%

Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lightt…

lighttpd Debian

Dec 24, 2011