HPE Community
Other HPE Product Questions
1824950 Members
3833 Online
109678 Solutions
New Discussion

Who Me Too'd this topic

paulo_rribeiro
Occasional Visitor

‎10-02-2024 09:49 AM

‎10-02-2024 09:49 AM

Vulnerabilities Lighttpd in the HPE OfficeConnect Switch 1820 24G J9980A

In our inspection routines we found vulnerabilities in the HPE OfficeConnect Switch 1820 24G J9980A.
vulnerabilities: Lighttpd < 1.4.35 Multiple Vulnerabilities - Active Check

Vulnerability Insight
The following flaws exist:
- mod_mysql_vhost module is not properly sanitizing user supplied input passed via the host-
name
- mod_evhost and mod_simple_vhost modules are not properly sanitizing user supplied input
via the hostname.

Vulnerability Detection Method
Sends a crafted HTTP GET request and checks the response.
Details: Lighttpd < 1.4.35 Multiple Vulnerabilities - Active Check
OID:1.3.6.1.4.1.25623.1.0.802072
Version used: 2023-02-01T10:08:40Z

References
cve: CVE-2014-2323
cve: CVE-2014-2324


I need help on how to resolve this vulnerability

 

Thanks

1 person had this problem.
0 Kudos
Reply
Who Me Too'd this topic
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.