Vulnerability in Acme Labs Thttpd
CVE-2005-3124
syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file.
EPSS: 0.004 (29.3th percentile) — read the EPSS interpretation.
Affected products
- Acme_labs Thttpd — versions 2.21b, 2.23b1
- N/a — versions n/a
References
- security@debian.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_VUPEN)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_BID)