Tan Chew Keong has reported two vulnerabilities in RaidenHTTPD, which can be exploited by malicious people to gain knowledge of potentially sensitive information or compromise a vulnerable system.

1) An input validation error can be exploited to disclose the source code of PHP scripts by appending a period or a space at the end of the requested PHP script.

2) A boundary error within the processing of HTTP requests can be exploited to cause a buffer overflow by supplying an overly long POST request (more than 524 bytes).

The vulnerabilities have been reported in version 1.1.32. Other versions may also be affected.

Solution
Update to version 1.1.34.

Provided and/or discovered by
Tan Chew Keong

Changelog
Further details available in Customer Area

Original Advisory
http://www.security.org.sg/vuln/raidenhttpd1132.html

Deep Links
Links available in Customer Area