Description

mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings.

Remediation

References

CVE-2007-3949

Related Vulnerabilities

OpenSSL Out-of-bounds Read Vulnerability (CVE-2017-3731)

Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-39162)

WordPress Plugin Product Slider For WooCommerce Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.5)

WordPress Plugin Rank Math SEO-Best SEO For WordPress To Increase Your SEO Traffic Security Bypass (1.0.27)

WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (0.5.26)

Severity

High

Classification

CVE-2007-3949

Tags

Missing Update Known Vulnerabilities