Multiple vulnerabilities have been identified in Lighttpd, which could be exploited by remote attackers to cause a denial of service or bypass security restrictions. These issues are caused by errors when handling an overly large number of connections, processing specially crafted HTTP or SCGI requests, or parsing malformed HTTP and Auth-Digest headers, which could be exploited by attackers to create a denial of service condition or gain unauthorized access to restricted files.
