File Access Vulnerability in Lighttpd Web Server
CVE-2008-4360
Currently unrated
What is CVE-2008-4360?
An issue exists in Lighttpd's mod_userdir, where it performs case-sensitive comparisons on filename components despite running on a case-insensitive operating system or filesystem. This flaw can enable remote attackers to circumvent intended access controls by exploiting misconfigured rules for file types, such as .php, potentially allowing unauthorized access to sensitive files. The vulnerability emphasizes the importance of proper configuration in web server environments to safeguard against unauthorized intrusions.