Launchpad.net

CVE 2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file.

See the CVE page on Mitre.org for more details.

References