Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lighttpd mod_userdir区分大小写比较信息泄露漏洞
Vulnerability Description
lighttpd是德国软件开发者Jan Kneschke所研发的一款开源的Web服务器，它的主要特点是仅需少量的内存及CPU资源即可达到同类网页服务器的性能。 当使用不区分大小写的操作系统或文件系统时，Lighttpd的mod_userdir模块对配置选项中的文件名组件执行了区分大小写的比较，允许远程攻击者绕过预期的访问限制。例如，如果将php配置为处理以.php结尾的文件时，攻击者就可以通过http://example.com/~user/file.PHP请求获得PHP源码。
CVSS Information
N/A
Vulnerability Type
N/A