Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2006-03-06	CVE-2006-0814	Remote Script Disclosure vulnerability in Lighttpd response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files. network low complexity lighttpd	5.0
2005-02-16	CVE-2005-0453	Remote Security vulnerability in Lighttpd 1.3.7 The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 (null) character after the file extension. network low complexity lighttpd	5.0