CVE-2007-3948
connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service (failed assertion) via a large number of connection attempts.
Date published : 2007-07-23
http://www.securityfocus.com/bid/24967
http://www.securityfocus.com/archive/1/474131/100/0/threaded