mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-22 18:09:40 +02:00
710 B
710 B
CVE-2013-4508
Description
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.
POC
Reference
No PoCs from references.