Unscored DSA-1521-1 1 CVE

lighttpd - arbitrary file disclosure

Published Mar 16, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	lighttpd	1.4.13-4etch6

Vulnerabilities 1

Unscored —

CVE-2008-1270 Public exploit EPSS 12%

mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow re…

lighttpd Debian

Mar 10, 2008