Synopsis :

The remote Fedora host is missing a security update.

Description :

Lighttpd (1.4.17 and earlier) is prone to a header overflow when using
the mod_fastcgi extension, this can lead to arbitrary code execution
in the fastcgi application. This 1.4.18 update fixes the issue.

See also :

http://www.nessus.org/u?8e12d017

Solution :

Update the affected packages.

Risk factor :

Medium / CVSS Base Score : 6.8
(CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
Public Exploit Available : true