Sign in Get started

← All advisories

Unrated severityNVD Advisory· Published Nov 6, 2005· Updated Apr 16, 2026

CVE-2005-3124

CVE-2005-3124

Description

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file.

Affected products

2

Acme/Thttpd2 versions
cpe:2.3:a:acme_labs:thttpd:2.21b:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:acme_labs:thttpd:2.21b:*:*:*:*:*:*:*
- cpe:2.3:a:acme_labs:thttpd:2.23b1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

www.debian.org/security/2005/dsa-883nvdPatchVendor Advisory
secunia.com/advisories/17454nvd
secunia.com/advisories/17472nvd
www.securityfocus.com/bid/15320nvd
www.vupen.com/english/advisories/2005/2308nvd

News mentions

0

No linked articles in our index yet.