CVE:CVE-2008-4359
CNNVD:CNNVD-200810-028
lighttpd在执行URL解码前比较URIs模式rul.redirect和url.rewrite配置设置,这可能会引起远程攻击者绕过预设的访问限制，获得敏感信息或修改数据。
solution:Upgrade lighttpd lighttpd to a higher version than 1.4.20,and avoid the version (,1.4.20); Upgrade debian debian_linux to a higher version than 4.0,and avoid the version 4.0