lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource consumption) by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2007-04-17 20:19
Updated : 2018-10-16 09:41
NVD link : CVE-2007-1869
Mitre link : CVE-2007-1869
JSON object : View
CWE
Products Affected
lighttpd
- lighttpd