CVE-2006-0814

no score yetEPSS 11%

lighttpd lighttpd: no CVSS score yet. EPSS 11% chance of exploitation in the next 30 days.

response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files.

EPSS: 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
Published: 2006-03-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

lighttpd:lighttpd

References

http://secunia.com/advisories/18886
http://secunia.com/secunia_research/2006-9/advisory/
http://securityreason.com/securityalert/523
http://securitytracker.com/id?1015703
http://trac.lighttpd.net/trac/changeset/1005

Check your stack JSON