CVE-2006-0760

Published: Feb 18, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain sensitive information via file extensions with unexpected capitalization, as demonstrated by a request for index.PHP when the configuration invokes the PHP interpreter only for ".php" names.

Affected (47)

Products: Lighttpd: Lighttpd

Lighttpd

1 product

Lighttpd

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Lighttpd Lighttpd	Version 1.0.2
Lighttpd Lighttpd	Version 1.0.3
Lighttpd Lighttpd	Version 1.1.0
Lighttpd Lighttpd	Version 1.1.1
Lighttpd Lighttpd	Version 1.1.2
Lighttpd Lighttpd	Version 1.1.3
Lighttpd Lighttpd	Version 1.1.4
Lighttpd Lighttpd	Version 1.1.5
Lighttpd Lighttpd	Version 1.1.6
Lighttpd Lighttpd	Version 1.1.7
Lighttpd Lighttpd	Version 1.1.8
Lighttpd Lighttpd	Version 1.1.9
Lighttpd Lighttpd	Version 1.2.0
Lighttpd Lighttpd	Version 1.2.1
Lighttpd Lighttpd	Version 1.2.2
Lighttpd Lighttpd	Version 1.2.3
Lighttpd Lighttpd	Version 1.2.4
Lighttpd Lighttpd	Version 1.2.5
Lighttpd Lighttpd	Version 1.2.6
Lighttpd Lighttpd	Version 1.2.7
Lighttpd Lighttpd	Version 1.2.8
Lighttpd Lighttpd	Version 1.3.0
Lighttpd Lighttpd	Version 1.3.10
Lighttpd Lighttpd	Version 1.3.11
Lighttpd Lighttpd	Version 1.3.12
Lighttpd Lighttpd	Version 1.3.13
Lighttpd Lighttpd	Version 1.3.14
Lighttpd Lighttpd	Version 1.3.15
Lighttpd Lighttpd	Version 1.3.16
Lighttpd Lighttpd	Version 1.3.1
Lighttpd Lighttpd	Version 1.3.2
Lighttpd Lighttpd	Version 1.3.3
Lighttpd Lighttpd	Version 1.3.4
Lighttpd Lighttpd	Version 1.3.5
Lighttpd Lighttpd	Version 1.3.6
Lighttpd Lighttpd	Version 1.3.7
Lighttpd Lighttpd	Version 1.3.8
Lighttpd Lighttpd	Version 1.3.9
Lighttpd Lighttpd	Version 1.4.0
Lighttpd Lighttpd	Version 1.4.1
Lighttpd Lighttpd	Version 1.4.2
Lighttpd Lighttpd	Version 1.4.3
Lighttpd Lighttpd	Version 1.4.4
Lighttpd Lighttpd	Version 1.4.5
Lighttpd Lighttpd	Version 1.4.6
Lighttpd Lighttpd	Version 1.4.7
Lighttpd Lighttpd	Version 1.4.8