Description

lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NULL pointer dereference.

Remediation

References

CVE-2007-1870

Related Vulnerabilities

Contao Incorrect Default Permissions Vulnerability (CVE-2019-19712)

WordPress Plugin Backup and Restore WordPress-WPBackItUp Cross-Site Request Forgery (1.6.7)

Oracle Database Server CVE-2009-1969 Vulnerability (CVE-2009-1969)

WebLogic Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2021-23450)

Contao Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-10641)

Severity

High

Classification

CVE-2007-1870

Tags

Missing Update Known Vulnerabilities