← Database

CVE-2007-1870

HIGH CVSS: 7.8 Published: 2007-04-18 Modified: 2026-06-16

Description

lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NULL pointer dereference.

Affected Platforms

Lighttpd Lighttpd

Weakness Type

NVD-CWE-Other

References