CVE-2006-0814

response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that…

published March 6, 2006

CVSS
—
EPSS
11%
Percentile
95.8
In the wild
Unconfirmed
What it is

response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10569 · 95.8th percentile
Published
2006-03-06T21:00Z
EPSS history
Timeline
  • 06 MAR 21:00Z
    response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that…
    cvelistv5