2
Candidate: CVE-2007-3947
4
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3947
6
request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of
7
service (daemon crash) by sending an HTTP request with duplicate headers,
8
as demonstrated by a request containing two Location header lines, which
9
results in a segmentation fault.
13
dapper_lighttpd: released (1.4.11-3ubuntu3.5)
14
edgy_lighttpd: released (1.4.13~r1370-1ubuntu1.3)
15
feisty_lighttpd: released (1.4.13-9ubuntu4.2)
16
gutsy_lighttpd: not-affected
17
devel_lighttpd: not-affected
18
upstream_lighttpd: released (1.4.16)