Two vulnerabilities have been reported in LiteSpeed Web Server, which can be exploited by malicious users to compromise a vulnerable system and malicious people to cause a DoS (Denial of Service).

1) An unspecified error can be exploited to cause Lshttpd to enter an infinite loop.

2) An unspecified post-authentication error may be exploited to execute arbitrary code.

The vulnerabilities are reported in version 3.3.19. Other versions may also be affected.

Solution
Restrict access to services.

Provided and/or discovered by
Reportedly modules for VulnDisco Pack.

Original Advisory
http://intevydis.com/vd-list.shtml

Deep Links
Links available to Secunia VIM customers