lighttpd -- DOS when access files with mtime 0

Lighttpd SA:

Lighttpd caches the rendered string for mtime. The cache key has
as a default value 0. At that point the pointer to the string are
still NULL. If a file with an mtime of 0 is requested it tries to
access the pointer and crashes.
The bug requires that a malicious user can either upload files or
manipulate the mtime of the files.
The bug was reported by cubiq and fixed by Marcus Rueckert.