Skip to content
OpenAdvisories
Unscored DSA-1645-1 3 CVEs

lighttpd - various problems

Published Oct 6, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 lighttpd 1.4.13-4etch11

Vulnerabilities 3

  • Unscored —

    Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause …

  • Unscored —

    lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings bef…

  • Unscored —

    mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-se…