Description

lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NULL pointer dereference.

Remediation

References

CVE-2007-1870

Related Vulnerabilities

YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-3005)

WordPress Plugin Responsive Products Showcase Listing for WordPress-WP Product Gallery Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.1)

WordPress Plugin Another WordPress Classifieds Cross-Site Scripting (3.3.1)

WordPress Plugin WP Upload Restriction Multiple Vulnerabilities (2.2.3)

WordPress Plugin FAQ Multiple Cross-Site Scripting Vulnerabilities (1.0.14)

Severity

High

Classification

CVE-2007-1870

Tags

Missing Update Known Vulnerabilities