CVE-2013-4559

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote attackers to gain privileges, as demonstrated by multiple calls to the clone function that cause setuid to fail when the user process limit is reached.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_02.txtVendor Advisory
http://jvn.jp/en/jp/JVN37417423/index.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-01/msg00049.htmlMailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=141576815022399&w=2Issue Tracking, Third Party Advisory
http://secunia.com/advisories/55682Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/11/12/4Mailing List, Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10310Third Party Advisory
https://www.debian.org/security/2013/dsa-2795Third Party Advisory
http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_02.txtVendor Advisory
http://jvn.jp/en/jp/JVN37417423/index.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-01/msg00049.htmlMailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=141576815022399&w=2Issue Tracking, Third Party Advisory
http://secunia.com/advisories/55682Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/11/12/4Mailing List, Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10310Third Party Advisory
https://www.debian.org/security/2013/dsa-2795Third Party Advisory

Timeline

Published: Nov 20, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-45605.0Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentation fault and crash) v CVE-2013-45619.1In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidential CVE-2013-45626.8The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-s CVE-2013-45637.1The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload (UFO) is enabled, CVE-2013-45645.0Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid maj CVE-2013-45656.8Heap-based buffer overflow in the __OLEdecode function in ppthtml 0.5.1 and earlier allows remote attackers to cause a denial of service (cr CVE-2013-45664.0mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in CVE-2013-45674.3Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows CVE-2013-45684.3Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows CVE-2013-45694.3The CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3, when "Group changes by page in recen CVE-2013-45705.0The zend_inline_hash_func function in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x CVE-2013-45717.5Buffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 has