Search for vulnerabilities
Vulnerability details: VCID-6sqj-7xk4-g3h5
Vulnerability ID VCID-6sqj-7xk4-g3h5
Aliases CVE-2008-1270
Summary lighttpd considers empty directory string to be CWD
Status Published
Exploitability 2.0
Weighted Severity 0.1
Risk 0.2
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
epss 0.05883 https://api.first.org/data/v1/epss?cve=CVE-2008-1270
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1270.json
https://api.first.org/data/v1/epss?cve=CVE-2008-1270
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1270
437037 https://bugzilla.redhat.com/show_bug.cgi?id=437037
CVE-2008-1270;OSVDB-43170 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/31396.txt
CVE-2008-1270;OSVDB-43170 Exploit https://www.securityfocus.com/bid/28226/info
Data source Exploit-DB
Date added March 12, 2008
Description Lighttpd 1.4.x - mod_userdir Information Disclosure
Ransomware campaign use Known
Source publication date March 12, 2008
Exploit type remote
Platform linux
Source update date Feb. 4, 2014
Source URL https://www.securityfocus.com/bid/28226/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.90222
EPSS Score 0.05883
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T11:32:40.288614+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1270.json 37.0.0