thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or touch arbitrary files via a symlink attack on the start_thttpd temporary file.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
acme labs thttpd 2.25b |