CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.6. Its EPSS score suggests a 10.7% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2013-4559
Severity
HIGH
CVSS
7.6
EPSS
10.72%
Original NVD Description
lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote attackers to gain privileges, as demonstrated by multiple calls to the clone function that cause setuid to fail when the user process limit is reached.