Skip to main content

CVE-2007-3949

High
8.3/10

Summary

mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings.

  • MEDIUM
  • NETWORK
  • NONE
  • PARTIAL
  • PARTIAL
  • COMPLETE

References

Advisory Timeline

  • Published