Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2008-4360 - Vulnerability Database
Lighttpd

Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2008-4360

High
Reference: CVE-2008-4360
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-4360
Title: Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

mod_userdir in lighttpd before 1.4.20 when a case-insensitive operating system or filesystem is used performs case-sensitive comparisons on filename components in configuration options which might allow remote attackers to bypass intended access restrictions as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.