CVE:CVE-2013-4560
CNNVD:CNNVD-201311-204
lighttpd是德国Jan Kneschke个人开发者的一款开源的Web服务器。
lighttpd 1.4.32及之前的版本中存在释放后重用漏洞。当调用‘FAMMonitorDirectory’函数失败时，远程攻击者可利用该漏洞造成拒绝服务（分段错误程序崩溃）。
solution:Upgrade lighttpd lighttpd to a higher version than 1.4.33,and avoid the version (,1.4.33); Upgrade debian debian_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade opensuse opensuse to a higher version than 12.2,12.3,13.1,and avoid the version 12.2,12.3,13.1