Unscored CVE-2005-3124 EUVD-2005-3124GHSA-wxcf-p893-2c63

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file.

Published Nov 6, 2005 · Updated Aug 7, 2024 · Assigned by debian

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 3.1	thttpd	2.23beta1-3sarge1	DSA-883-1
Debian 3.0	thttpd	2.21b-11.3	DSA-883-1

Advisories 1

DSA-883-1 thttpd - insecure temporary file Debian Security (DSA / DLA) · Mar 9, 2026

References

DSA-883 vendor-advisory
17472 third-party-advisory
ADV-2005-2308 vdb-entry
17454 third-party-advisory
15320 vdb-entry