CVE-2008-4360

mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename…

published October 3, 2008

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04345 · 91.2th percentile
Published
2008-10-03T17:18Z
EPSS history
Timeline
  • 03 OCT 17:18Z
    mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename…
    cvelistv5