CVE-2008-1111
Publication date 4 March 2008
Last updated 24 July 2024
Ubuntu priority
mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information.