[lighttpd] [CVE-2008-1531] DoS vulnerability via incorrectly handled SSL errors

[disabled.user]

Binary package hint: lighttpd

References:
DSA-1540-1 (http://www.debian.org/security/2008/dsa-1540)

Quoting:
"It was discovered that lighttpd, a fast webserver with minimal memory
footprint, was didn't correctly handle SSL errors. This could allow
a remote attacker to disconnect all active SSL connections."

[William Grant (wgrant)]

In future, please check https://launchpad.net/bugs/cve/CVE-XXXX-XXXX for duplicates first, as they might not be visible in Ubuntu lists due to being fixed in all releases.

[disabled.user (disabled.user-deactivatedaccount)]

Will do so, didn't know this browse-by-CVE-feature since now. That's why I try to have related CVEs in the summaries of new reports, so that Launchpad's "Is the bug you’re reporting one of these?"-feature may find duplicates before reporting.