Unrated severityNVD Advisory· Published Jul 24, 2007· Updated Jun 16, 2026
CVE-2007-3946
CVE-2007-3946
Description
mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving (1) a memory leak, (2) use of md5-sess without a cnonce, (3) base64 encoded strings, and (4) trailing whitespace in the Auth-Digest header.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
18- secunia.com/advisories/26130nvdPatch
- secunia.com/advisories/26158nvdVendor Advisory
- osvdb.org/38314nvd
- osvdb.org/38315nvd
- osvdb.org/38316nvd
- osvdb.org/38317nvd
- secunia.com/advisories/26505nvd
- secunia.com/advisories/26593nvd
- security.gentoo.org/glsa/glsa-200708-11.xmlnvd
- trac.lighttpd.net/trac/browser/branches/lighttpd-1.4.x/NEWSnvd
- trac.lighttpd.net/trac/changeset/1875nvd
- www.debian.org/security/2007/dsa-1362nvd
- www.novell.com/linux/security/advisories/2007_15_sr.htmlnvd
- www.securityfocus.com/archive/1/474131/100/0/threadednvd
- www.securityfocus.com/bid/24967nvd
- www.vupen.com/english/advisories/2007/2585nvd
- issues.rpath.com/browse/RPL-1550nvd
- issues.rpath.com/browse/RPL-1554nvd
News mentions
0No linked articles in our index yet.