Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-d983-1g2v-h7e9
Vulnerability ID VCID-d983-1g2v-h7e9
Aliases CVE-2008-1270
Summary Multiple vulnerabilities in lighttpd may lead to information disclosure or a Denial of Service.
Status Published
Exploitability 2.0
Weighted Severity 0.1
Risk 0.2
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.08817 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1270.json
https://api.first.org/data/v1/epss?cve=CVE-2008-1270
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1270
437037 https://bugzilla.redhat.com/show_bug.cgi?id=437037
CVE-2008-1270;OSVDB-43170 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/31396.txt
CVE-2008-1270;OSVDB-43170 Exploit https://www.securityfocus.com/bid/28226/info
GLSA-200804-08 https://security.gentoo.org/glsa/200804-08
Data source Exploit-DB
Date added March 12, 2008
Description Lighttpd 1.4.x - mod_userdir Information Disclosure
Ransomware campaign use Known
Source publication date March 12, 2008
Exploit type remote
Platform linux
Source update date Feb. 4, 2014
Source URL https://www.securityfocus.com/bid/28226/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.92494
EPSS Score 0.08817
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:03:33.626124+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200804-08 38.0.0