>solved it by adding in the visudo file a line thar www-data user needs no password for sudo Dear lord. SUID scripts have a bad reputation but that would have

>solved it by adding in the visudo file a line thar www-data user needs no password for sudo Dear lord. SUID scripts have a bad reputation but that would have been a much more secure solution. Now the attack surface is the entire of lighthttpd plus any CGI scripts, which is much simpler to exploit than crafting a custom malicious kernel module.