Bug 172469 - thttpd: CVE-2005-3124 - insecure temp file
Summary: thttpd: CVE-2005-3124 - insecure temp file
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: thttpd
Version: 4
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Matthias Saou
QA Contact: Fedora Extras Quality Assurance
URL: http://cve.mitre.org/cgi-bin/cvename....
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-11-04 21:43 UTC by Ville Skyttä
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version: 2.25b-8
Clone Of:
Environment:
Last Closed: 2005-11-07 12:42:57 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Ville Skyttä 2005-11-04 21:43:44 UTC 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3124 
http://seclists.org/lists/fulldisclosure/2005/Nov/0128.html  
 
Patch in Gentoo's CVS: 
http://www.gentoo.org/cgi-bin/viewcvs.cgi/*checkout*/www-servers/thttpd/files/thttpd-2.25/fix-insecure-tmp-creation-CVE-2005-3124.diff
Comment 1 Matthias Saou 2005-11-07 11:37:26 UTC 
Thanks a lot for pointing this out, and for the links.
Expect a fixed package for FC3, 4 & devel today.
Note You need to log in before you can comment on or make changes to this bug.