CVE-2007-3947
lighttpd < 1.4.15 - Denial of Service via Duplicate HTTP Headers
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-3947. PoCs published by Abhisek Datta.
AI-analyzed exploit summary This Metasploit module exploits a heap-based memory corruption vulnerability in Lighttpd <= 1.4.15 by leveraging dangling pointer dereference during HTTP header folding. It targets specific Linux distributions and attempts to achieve remote code execution.
Description
request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate headers, as demonstrated by a request containing two Location header lines, which results in a segmentation fault.
Exploits (1)
This Metasploit module exploits a heap-based memory corruption vulnerability in Lighttpd <= 1.4.15 by leveraging dangling pointer dereference during HTTP header folding. It targets specific Linux distributions and attempts to achieve remote code execution.