Debian Security Advisory 1521-1 – Julien Cayzac discovered that under certain circumstances lighttpd, a fast webserver with minimal memory footprint, might allow the reading of arbitrary files from the system. This problem could only occur with a non-standard configuration.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64629/dsa-1521-1.txt
Source: https://packetstormsecurity.com/files/64629/Debian-Linux-Security-Advisory-1521-1.html