|
CVE Reference: CVE-2006-0760
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2006-0760
|
|
Description:
LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain sensitive information via file extensions with unexpected capitalization, as demonstrated by a request for index.PHP when the configuration invokes the PHP interpreter only for ".php" names.
|
|
CVE Status:
Candidate
|
|
References:
XF
http://xforce.iss.net/xforce/xfdb/24699
SAID
Secunia Advisory: SA18869
OSVDB
23229
CONFIRM
http://www.lighttpd.net/news/
http://lighttpd.net/news/
|
|
|
Return to the previous page.
|
