CVE-2008-1111

mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain…

published March 4, 2008

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02017 · 80.6th percentile
Published
2008-03-04T23:00Z
EPSS history
Timeline
  • 04 MAR 23:00Z
    mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain…
    cvelistv5