Bug 172469

Summary: thttpd: CVE-2005-3124 - insecure temp file
Product: [Fedora] Fedora Reporter: Ville Skyttä <scop>
Component: thttpdAssignee: Matthias Saou <matthias>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 4CC: extras-qa
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3124
Whiteboard:
Fixed In Version: 2.25b-8 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-11-07 12:42:57 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ville Skyttä 2005-11-04 21:43:44 UTC 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3124 
http://seclists.org/lists/fulldisclosure/2005/Nov/0128.html  
 
Patch in Gentoo's CVS: 
http://www.gentoo.org/cgi-bin/viewcvs.cgi/*checkout*/www-servers/thttpd/files/thttpd-2.25/fix-insecure-tmp-creation-CVE-2005-3124.diff
Comment 1 Matthias Saou 2005-11-07 11:37:26 UTC 
Thanks a lot for pointing this out, and for the links.
Expect a fixed package for FC3, 4 & devel today.