Lighttpd Other Vulnerability - CVE-2007-3949 - Vulnerability Database

Lighttpd Other Vulnerability - CVE-2007-3949

High

Reference: CVE-2007-3949

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-3949

Title: Lighttpd Other Vulnerability

Overview:

mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL which allows remote attackers to bypass url.access-deny settings.