Unscored DSA-1303-1 2 CVEs

lighttpd - denial of service

Published Jun 10, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	lighttpd	1.4.13-4etch1

Vulnerabilities 2

Unscored —

CVE-2007-1869

lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource consumption) by disco…

lighttpd Debian

Apr 18, 2007
Unscored —

CVE-2007-1870

lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, …

lighttpd Debian

Apr 18, 2007