Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 4.0 | lighttpd | 1.4.13-4etch4 |
Vulnerabilities 5
-
Unscored —
mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) vi…
-
Unscored —CVE-2007-3947 Public exploit
request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP req…
-
Unscored —
mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypa…
-
Unscored —
lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service (daemon crash) via …
-
Unscored —CVE-2007-4727 EPSS 13%
Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi extension in lighttpd be…