Description

connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service (failed assertion) via a large number of connection attempts.

Remediation

References

CVE-2007-3948

Related Vulnerabilities

WordPress Plugin Feed Them Social-for Twitter feed, Youtube and more Multiple Vulnerabilities (2.9.9)

WordPress Plugin Simple Personal Message SQL Injection (1.0.3)

SugarCRM Improper Input Validation Vulnerability (CVE-2017-14509)

WordPress Plugin WP VR-360 Panorama and Virtual Tour Builder For WordPress Cross-Site Request Forgery (8.2.7)

MongoDb Excessive Iteration Vulnerability (CVE-2018-20805)

Severity

Medium

Classification

CVE-2007-3948

Tags

Missing Update Known Vulnerabilities