Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
CNVD-2016-06195
Vulnerability from cnvd - Published: 2016-08-10
VLAI
Title
lighttpd httpoxy未经身份验证远程漏洞
Description
Lighttpd是一款开源的Web服务器。
Lighttpd httpoxy存在安全漏洞，远程攻击者利用漏洞可发起中间人攻击，或在服务器上启动任意主机的连接。
Severity
高
Patch Name
lighttpd httpoxy未经身份验证远程漏洞的补丁
Patch Description
Lighttpd是一款开源的Web服务器。
Lighttpdhttpoxy存在安全漏洞，远程攻击者利用漏洞可发起中间人攻击，或在服务器上启动任意主机的连接。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
用户可联系供应商获得补丁信息： http://www.lighttpd.net/
Reference
https://www.auscert.org.au/render.html?it=37482
Impacted products
| Name | LightTPD Lighttpd |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2016-1000212"
}
},
"description": "Lighttpd\u662f\u4e00\u6b3e\u5f00\u6e90\u7684Web\u670d\u52a1\u5668\u3002\r\n\r\nLighttpd httpoxy\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u53ef\u53d1\u8d77\u4e2d\u95f4\u4eba\u653b\u51fb\uff0c\u6216\u5728\u670d\u52a1\u5668\u4e0a\u542f\u52a8\u4efb\u610f\u4e3b\u673a\u7684\u8fde\u63a5\u3002",
"discovererName": "unknown",
"formalWay": "\u7528\u6237\u53ef\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://www.lighttpd.net/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2016-06195",
"openTime": "2016-08-10",
"patchDescription": "Lighttpd\u662f\u4e00\u6b3e\u5f00\u6e90\u7684Web\u670d\u52a1\u5668\u3002\r\n\r\nLighttpdhttpoxy\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u53ef\u53d1\u8d77\u4e2d\u95f4\u4eba\u653b\u51fb\uff0c\u6216\u5728\u670d\u52a1\u5668\u4e0a\u542f\u52a8\u4efb\u610f\u4e3b\u673a\u7684\u8fde\u63a5\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "lighttpd httpoxy\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u8fdc\u7a0b\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "LightTPD Lighttpd"
},
"referenceLink": "https://www.auscert.org.au/render.html?it=37482",
"serverity": "\u9ad8",
"submitTime": "2016-08-09",
"title": "lighttpd httpoxy\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u8fdc\u7a0b\u6f0f\u6d1e"
}
GSD-2016-1000212
Vulnerability from gsdAliases
{
"GSD": {
"alias": "CVE-2016-1000212",
"id": "GSD-2016-1000212",
"references": [
"https://www.suse.com/security/cve/CVE-2016-1000212.html",
"https://www.debian.org/security/2016/dsa-3642",
"https://advisories.mageia.org/CVE-2016-1000212.html",
"https://alas.aws.amazon.com/cve/html/CVE-2016-1000212.html"
]
}
}
SUSE-SU-2017:0728-1
Vulnerability from csaf_suse - Published: 2017-03-17 14:12 - Updated: 2017-03-17 14:12Summary
Security update for lighttpd
Severity
Moderate
Scope
2 vulnerabilities in this advisory, including CVE-2016-1000212.
CVE-2016-1000212
Recommended: 12 products
SUSE-SU-2017:0731-1
Vulnerability from csaf_suse - Published: 2017-03-17 14:07 - Updated: 2017-03-17 14:07Summary
Security update for lighttpd
Severity
Moderate
Scope
2 vulnerabilities in this advisory, including CVE-2016-1000212.
CVE-2016-1000212
Recommended: 52 products
UBUNTU-CVE-2016-1000212 (CVE-2016-1000212)
Vulnerability from osv_ubuntu – Published: 2016-07-27 00:00 – Updated: 2026-04-22 07:38 – Source website
VLAI
Details
Mitigation for HTTPoxy vulnerability
Severity
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "lighttpd",
"binary_version": "1.4.33-1+nmu2ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-cml",
"binary_version": "1.4.33-1+nmu2ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-magnet",
"binary_version": "1.4.33-1+nmu2ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-mysql-vhost",
"binary_version": "1.4.33-1+nmu2ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-trigger-b4-dl",
"binary_version": "1.4.33-1+nmu2ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-webdav",
"binary_version": "1.4.33-1+nmu2ubuntu2.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:14.04:LTS",
"name": "lighttpd",
"purl": "pkg:deb/ubuntu/lighttpd@1.4.33-1+nmu2ubuntu2.1?arch=source\u0026distro=trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.33-1+nmu2ubuntu2.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.4.31-3ubuntu3",
"1.4.33-1ubuntu1",
"1.4.33-1+nmu2ubuntu1",
"1.4.33-1+nmu2ubuntu2"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "lighttpd",
"binary_version": "1.4.35-4ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-cml",
"binary_version": "1.4.35-4ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-magnet",
"binary_version": "1.4.35-4ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-mysql-vhost",
"binary_version": "1.4.35-4ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-trigger-b4-dl",
"binary_version": "1.4.35-4ubuntu2.1"
},
{
"binary_name": "lighttpd-mod-webdav",
"binary_version": "1.4.35-4ubuntu2.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "lighttpd",
"purl": "pkg:deb/ubuntu/lighttpd@1.4.35-4ubuntu2.1?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.35-4ubuntu2.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.4.35-4ubuntu1",
"1.4.35-4ubuntu2"
]
}
],
"aliases": [],
"details": "Mitigation for HTTPoxy vulnerability",
"id": "UBUNTU-CVE-2016-1000212",
"modified": "2026-04-22T07:38:07Z",
"published": "2016-07-27T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-1000212"
},
{
"type": "REPORT",
"url": "https://redmine.lighttpd.net/projects/lighttpd/repository/revisions/779c133c16f9af168b004dce7a2a64f16c1cb3a4/diff"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1000212"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2016-1000212"
]
}