Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

thttpd: remote file access

Package(s):

thttpd

CVE #(s):

Created:

February 1, 2007

Updated:

February 7, 2007

Description:

The start-stop-daemon command from thttpd performs a chdir / command, this allows all files that are readable by the thttpd process to be remotely accessed by unauthenticated users.

Alerts:

Gentoo

200701-28

2007-01-31

(Log in to post comments)