This script is Copyright (C) 2013-2015 Tenable Network Security, Inc.
The remote Amazon Linux AMI host is missing a security update.
The http_request_split_value function in request.c in lighttpd before
1.4.32 allows remote attackers to cause a denial of service (infinite
loop) via a request with a header containing an empty token, as
demonstrated using the 'Connection: TE,,Keep-Alive' header.
See also :
Run 'yum update lighttpd' to update your system.
Risk factor :
Medium / CVSS Base Score : 5.0