Lighttpd · Lighttpd · CVE-2007-1870
Name of the Vulnerable Software and Affected Versions:
lighttpd versions prior to 1.4.14
Description:
The issue allows attackers to cause a denial of service, resulting in a crash, by sending a request to a file with an mtime of 0. This leads to a NULL pointer dereference.
Recommendations:
For versions prior to 1.4.14, update to version 1.4.14 or later to resolve the issue.