- Home
- CVEs with nessus.description==Lighttpd SA :
Lighttpd caches the rendered string for mtime. The cache key has as a default value 0. At that point the pointer to the string are still NULL. If a file with an mtime of 0 is requested it tries to access the pointer and crashes.
The bug requires that a malicious user can either upload files or manipulate the mtime of the files.
The bug was reported by cubiq and fixed by Marcus Rueckert.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top