Unrated severityNVD Advisory· Published Oct 3, 2008· Updated Jun 16, 2026
CVE-2008-4359
CVE-2008-4359
Description
lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4Patches
Vulnerability mechanics
References
24- www.lighttpd.net/security/lighttpd-1.4.x_rewrite_redirect_decode_url.patchnvdPatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.htmlnvdThird Party Advisory
- secunia.com/advisories/32069nvdThird Party Advisory
- secunia.com/advisories/32132nvdThird Party Advisory
- secunia.com/advisories/32480nvdThird Party Advisory
- secunia.com/advisories/32834nvdThird Party Advisory
- secunia.com/advisories/32972nvdThird Party Advisory
- security.gentoo.org/glsa/glsa-200812-04.xmlnvdThird Party Advisory
- trac.lighttpd.net/trac/changeset/2278nvdBroken LinkVendor Advisory
- trac.lighttpd.net/trac/changeset/2307nvdBroken LinkVendor Advisory
- trac.lighttpd.net/trac/changeset/2309nvdBroken LinkVendor Advisory
- trac.lighttpd.net/trac/changeset/2310nvdBroken LinkVendor Advisory
- trac.lighttpd.net/trac/ticket/1720nvdVendor Advisory
- wiki.rpath.com/Advisories:rPSA-2008-0309nvdThird Party Advisory
- wiki.rpath.com/wiki/Advisories:rPSA-2008-0309nvdThird Party Advisory
- www.debian.org/security/2008/dsa-1645nvdThird Party Advisory
- www.lighttpd.net/security/lighttpd_sa_2008_05.txtnvdVendor Advisory
- www.securityfocus.com/archive/1/497932/100/0/threadednvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/31599nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2008/2741nvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/45690nvdThird Party AdvisoryVDB Entry
- openwall.com/lists/oss-security/2008/09/30/1nvdMailing List
- openwall.com/lists/oss-security/2008/09/30/2nvdMailing List
- openwall.com/lists/oss-security/2008/09/30/3nvdMailing List
News mentions
0No linked articles in our index yet.