FreeBSD Ports: lighttpd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2005-0453

Lighttpd 1.3.7 and earlier are affected by a vulnerability in buffer_urldecode that mishandles control characters, allowing a remote attacker to disclose the source code of CGI/FastCGI scripts via a URL containing a trailing %00 after the file extension. The issue is an information disclosure aff...

CVE-2005-0453: Undefined Security Weakness

The bufferurldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 null character after the file extension...