CVE-2007-3949
EPSS 0.61%Published: 7/24/2007Modified: 4/28/2026
Description
mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings.
Affected packages (1)
- Debian/lighttpdfrom 0, < 1.4.16-1