CVE-2007-1870

lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NULL pointer dereference.

Link	Resource
http://www.lighttpd.net/assets/2007/4/13/lighttpd_sa2007_02.txt
http://secunia.com/advisories/24886	Patch Vendor Advisory
http://www.novell.com/linux/security/advisories/2007_007_suse.html
http://www.securityfocus.com/bid/23515
http://secunia.com/advisories/24995
http://security.gentoo.org/glsa/glsa-200705-07.xml
http://secunia.com/advisories/25166
https://issues.rpath.com/browse/RPL-1218
http://secunia.com/advisories/24947
http://www.debian.org/security/2007/dsa-1303
http://secunia.com/advisories/25613
http://www.vupen.com/english/advisories/2007/1399
https://exchange.xforce.ibmcloud.com/vulnerabilities/33678
http://www.securityfocus.com/archive/1/466464/30/6900/threaded

Configuration 1

cpe:2.3:a:lighttpd:lighttpd:1.4.3:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.6:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.12:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.15:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.1:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.0:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.8:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.4:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.9:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.5:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.13:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.4:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.2:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.14:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.10:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.5:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.3:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.8:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.11:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.16:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.12:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.9:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.10:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.7:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.6:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.7:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.13:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.3.2:*:*:*:*:*:*:* cpe:2.3:a:lighttpd:lighttpd:1.4.0:*:*:*:*:*:*:*

---

Published : 2007-04-18 03:19

Updated : 2018-10-16 04:41

---

NVD link : CVE-2007-1870

Mitre link : CVE-2007-1870

No products.

NVD-CWE-Other